fiinance--en-openoccean[.]pages[.]dev

PhishDestroy identifies fiinance--en-openoccean.pages.dev as an active fake OpenSea login drainer designed to steal cryptocurrency wallet credentials and NFT assets. The site masquerades as the legitimate OpenSea marketplace but uses a deceptive domain to trick users into entering wallet seed phrases or connecting wallets through malicious smart contracts. Once credentials or signing permissions are captured, attackers can drain NFT collections and transfer cryptocurrency out of connected wallets without additional authorization.

This domain was flagged by PhishDestroy as part of a generic phishing campaign with 1 out of 95 VirusTotal detections as of the latest scan. The domain was registered through Cloudflare, Inc. and routes through Cloudflare infrastructure to IP address 172.66.46.242 behind a Google Trust Services SSL certificate. The SSL certificate suggests an attempt to appear legitimate, but the combination of low detection scores and phishing-like behavior indicates a new or stealthy campaign.

If you visited fiinance--en-openoccean.pages.dev, immediately disconnect your wallet from the site, revoke any unintended smart contract permissions via wallet settings, and transfer remaining assets to a clean wallet. Report the incident to OpenSea support and scan your device for malware. Never reuse wallet seed phrases or enter credentials on unfamiliar sites. When in doubt, verify links using PhishDestroy before interacting.