openseaslogin0[.]wordpress[.]com

Analysis of openseaslogin0.wordpress.com indicates an elevated‑risk brand impersonation campaign targeting users of the OpenSea NFT marketplace. The site presents a page title of "Openseá Lôgin | The lárgest NFT márketpláce – Opensea login," which aligns with the declared scam type of a crypto scam and the identified impersonated brand, OpenSea. Technical profiling shows the domain is hosted on WordPress infrastructure, employing MySQL, PHP, Nginx, HSTS, and HTTP/3.

The TLS certificate is issued by Let’s Encrypt (E8), and the domain resolves to IP address 192.0.78.13, which belongs to AS2635 Automattic, Inc., located in the United States. The domain was created on March 03, 2000 and is registered through MarkMonitor, Inc.; its authoritative name servers are ns1‑ns4.wordpress.com. HTTP response code 410 confirms the resource is removed, and the current status is offline, with the site flagged as taken offline by PhishDestroy.

VirusTotal scans report nine of ninety‑five security vendors flagging the domain, and it appears on one external security blocklist. Despite the offline status, defenders should continue to enforce network‑level blocking of the resolved IP and the domain name, update URL filtering policies to include the exact host, and monitor for derivatives that may reuse the same page title pattern or similar WordPress‑based configurations. Continuous observation of the associated IP range and registrar activity is advised, as well as verification of any future DNS changes that could reactivate the domain.