OpenSea

Crypto & web3 United Statesopensea.ioRank 76 of the most impersonated
Cert findings · 24 h
7
Cert findings · 7 days
21
7 reported or listed · 14 on phishing hosts
Registered lookalikes
149
39 listed by a source or an address list
Official domains
1
verified from OpenSea's own sites and records

Certificate findings for OpenSea

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to OpenSea's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 25 findings, grouped by hostname

  1. opensea.ph US · AS23470 · ReliableSite.Net LLC2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    opensea.ph
    First seen
    2026-11-05 09:05 UTC
    First published
    2026-10-28 07:41 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.93.103.100.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.93.103.100
    Brand
    OpenSea
    Addresses
    172.93.103.100 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC
    212.92.105.194 · Netherlands · AS43350 NFORCE NForce Entertainment B.V.
    Domain
    opensea.ph
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  2. www.opensea.click GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    www.opensea.click
    First seen
    2026-11-04 11:27 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea.click
    Registered
    2026-07-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  3. www.opensea-mirror.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 37 d ago
    DetailsHide
    Hostname
    www.opensea-mirror.com
    First seen
    2026-11-04 11:27 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea-mirror.com
    Registered
    2026-09-29 · MAT BAO CORPORATION
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  4. www.nft-opensea.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.nft-opensea.com
    First seen
    2026-11-04 11:27 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    nft-opensea.com
    Registered
    2026-05-24 · MAT BAO CORPORATION
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  5. opensea.best FI · AS207003 · WEB1-AS Web1 Oy
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 34 d ago
    DetailsHide
    Hostname
    opensea.best
    First seen
    2026-11-03 18:00 UTC
    First published
    2026-11-03 18:16 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:20 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-03 17:00 UTC to 2027-02-01 17:00 UTC
    Logged 2026-11-03 17:59 UTC in Let's Encrypt Sycamore2027h1, entry 926,281,940
    SHA-256 9ab95ad14fb0527e1f621ca570b37c4a45314eebac8757ee2f62d396102a4e10
    Public key SHA-256 ffc45ca36c79b3c3dfae35f56f92913e36a809757336d617efaca562dcdb98b7
    Brand
    OpenSea
    Addresses
    78.17.209.108 · Finland · AS207003 WEB1-AS Web1 Oy
    Domain
    opensea.best
    Registered
    2026-10-02 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  6. www.opensea.io.bonsavonsoaps.com US · AS32475 · Internap Holding LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    www.opensea.io.bonsavonsoaps.com
    First seen
    2026-11-03 15:52 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 108.178.26.90.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 108.178.26.90
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 14:49 UTC to 2027-02-01 14:49 UTC
    Logged 2026-11-03 15:48 UTC in IPng Networks Halloumi2027h1, entry 350,332,195
    SHA-256 4ba5eac902085b2df0db49a8aeba847b41ba127f311f5421bcb30b6b01b7381e
    Public key SHA-256 1be5fc56c4815aa359f666a8642b01741a57128ffbce93a0d623c6a3829fca00
    Brand
    OpenSea
    Addresses
    108.178.26.90 · United States · AS32475 SINGLEHOP-LLC - Internap Holding LLC
    Domain
    bonsavonsoaps.com
    Registered
    2017-08-11 · GoDaddy.com, LLC
    MX
    Receives mail at bonsavonsoaps.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  7. opensea.io.bonsavonsoaps.com US · AS32475 · Internap Holding LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missingRegistered 9 y ago
    DetailsHide
    Hostname
    opensea.io.bonsavonsoaps.com
    First seen
    2026-11-03 15:52 UTC
    First published
    2026-11-03 16:45 UTC
    DNS
    Resolves · checked 2026-11-04 16:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 108.178.26.90.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 108.178.26.90
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-03 14:49 UTC to 2027-02-01 14:49 UTC
    Logged 2026-11-03 15:48 UTC in IPng Networks Halloumi2027h1, entry 350,332,195
    SHA-256 4ba5eac902085b2df0db49a8aeba847b41ba127f311f5421bcb30b6b01b7381e
    Public key SHA-256 1be5fc56c4815aa359f666a8642b01741a57128ffbce93a0d623c6a3829fca00
    Brand
    OpenSea
    Addresses
    108.178.26.90 · United States · AS32475 SINGLEHOP-LLC - Internap Holding LLC
    Domain
    bonsavonsoaps.com
    Registered
    2017-08-11 · GoDaddy.com, LLC
    MX
    Receives mail at bonsavonsoaps.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:53 UTC

    Suggest a correction

  8. opensea-home.me
    ListedListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    opensea-home.me
    First seen
    2026-11-02 12:31 UTC
    First published
    2026-11-02 12:48 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Not resolving since 2026-11-02 · checked 2026-11-04 13:01 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 11:28 UTC to 2027-01-31 12:26 UTC
    Logged 2026-11-02 12:28 UTC in IPng Networks Gouda2027h1, entry 293,404,384
    SHA-256 200d2d9fbb3255e2e1a49b83b8f05e63cce6791d094d6bf50302ce7effd27e89
    Public key SHA-256 16034e736716d23ba1c410e81275a2b60d63b34258737717016658ae87445ca3
    Brand
    OpenSea
    Domain
    opensea-home.me
    Registered
    2026-09-03 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  9. claims-opensea.pages.dev US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMask
    DetailsHide
    Hostname
    claims-opensea.pages.dev
    First seen
    2026-11-01 11:50 UTC
    First published
    2026-11-01 13:04 UTC
    Listing
    MetaMask: first observed in the feed 2026-11-01 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 13:09 UTC
    Listed
    MetaMask
    1. Certificate logged in CT
    2. Observed in the MetaMask feed
    3. We matched the new listing
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-11-01 00:00 UTC to 2027-01-25 00:03 UTC
    Logged 2026-11-01 03:07 UTC in Let's Encrypt Sycamore2027h1, entry 881,308,533
    SHA-256 52ee6600edc77687239e23aed35357a0c037e0f443aa3ba70c20399eef5cabb8
    Public key SHA-256 1aac77a3704fff71f2b645cee81ee404e634bae30d00ea077d079d141ead9523
    Brand
    OpenSea
    Addresses
    172.66.44.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.66.47.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:310c::ac42:2cb8
    2606:4700:310c::ac42:2f48
    Cloudflare
    Cloudflare (172.66.44.184, 172.66.47.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.

    Suggest a correction

  10. opensea.click GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as artlexplatform.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    opensea.click
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 2.26.96.13, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea.click
    Registered
    2026-07-14 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  11. opensea-mirror.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as artlexplatform.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 37 d ago
    DetailsHide
    Hostname
    opensea-mirror.com
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 2.26.96.13, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea-mirror.com
    Registered
    2026-09-29 · MAT BAO CORPORATION
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  12. nft-opensea.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    Phishing hostSame certificateAddress hosted confirmed phishing in the last 48 h · Same certificate as artlexplatform.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    nft-opensea.com
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 11:21 UTC
    DNS
    Resolves · checked 2026-11-04 11:27 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 2.26.96.13, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    nft-opensea.com
    Registered
    2026-05-24 · MAT BAO CORPORATION
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  13. www.opensea.legal GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    ReportedPhishing hostUnder opensea.legal, reported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 45 d ago
    DetailsHide
    Hostname
    www.opensea.legal
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 10:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Reported
    PhishDestroy, listing opensea.legal and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    3. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    PhishDestroy
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea.legal
    Registered
    2026-09-21 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  14. www.opensea-market.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    ListedPhishing hostUnder opensea-market.com, listed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    www.opensea-market.com
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 10:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Listed
    MetaMask, listing opensea-market.com and the names under it
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    3. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea-market.com
    Registered
    2026-10-01 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  15. opensea.legal GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    ReportedPhishing hostSame certificateReported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Same certificate as artlexplatform.com, listed by MetaMask · Same certificate as artlexplatform.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 45 d ago
    DetailsHide
    Hostname
    opensea.legal
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 10:14 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    3. Latest DNS check
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 13.143.175.138, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 13.143.175.138, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    PhishDestroy
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea.legal
    Registered
    2026-09-21 · Global Domain Group LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  16. opensea-market.com GB · AS215439 · PLAY2GO-NET PLAY2GO INTERNA…2 addresses
    ListedPhishing hostSame certificateListed by MetaMask · Address hosted confirmed phishing in the last 48 h · Same certificate as artlexplatform.com, listed by MetaMask · Same certificate as artlexplatform.com, listed by MetaMaskMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    opensea-market.com
    First seen
    2026-11-01 09:36 UTC
    First published
    2026-11-01 10:14 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 10:21 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.26.96.13.
    1. Phishing-host list fetched with the address
    2. Resolved to 2.26.96.13
    3. Latest DNS check
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 13.143.175.138, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Same certificate
    Same certificate as artlexplatform.com: listed by MetaMask
    OpenSea appears in this hostname
    Resolved to 13.143.175.138, an address that hosted confirmed phishing
    2 of 18 domains on this certificate have their own listing evidence
    Certificate 2708428c389021f6… · 18 domains on it · first seen 2026-11-01 09:36 UTC
    Certificate
    Issued by YE2
    Valid 2026-11-01 08:36 UTC to 2027-01-30 08:36 UTC
    Logged 2026-11-01 09:34 UTC in Google PlumbersArms2027h1, entry 553,921,996
    SHA-256 2708428c389021f63030d90bfdac99a0c29cdbecc9dcd86782c0dab5d185c5f3
    Public key SHA-256 7e41f0fab2d43e1a8ee048f980c55adb5090f3d2cb86d3fbafc771c7b6086b65
    Brand
    OpenSea
    Addresses
    2.26.96.13 · United Kingdom · AS215439 PLAY2GO-NET PLAY2GO INTERNATIONAL LIMITED
    13.143.175.138 · United Arab Emirates · AS219337 PLAY2GO PLAY2GO - FZCO
    Domain
    opensea-market.com
    Registered
    2026-10-01 · GMO Internet Group, Inc. d/b/a Onamae.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  17. offers-opensea.club DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…5 addresses
    Phishing hostHetznerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 3 y ago
    DetailsHide
    Hostname
    offers-opensea.club
    First seen
    2026-10-31 00:37 UTC
    First published
    2026-10-31 00:45 UTC
    DNS
    Resolves · checked 2026-11-05 00:55 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.78.156.59.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 5.78.156.59
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-30 23:37 UTC to 2027-01-28 23:37 UTC
    Logged 2026-10-31 00:35 UTC in DigiCert Wyvern2027h1, entry 363,898,318
    SHA-256 94582f7c0bb3f3f3eaf805ec6f2fbf0b2edc9b8f7c7bf41e52f44cd7f30712d7
    Public key SHA-256 e75a666dfe6f112e8d889acb870aab868a6f19474c6e65748b1fb3dfd842a249
    Brand
    OpenSea
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Domain
    offers-opensea.club
    Registered
    2023-12-22 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  18. opensearefundopensearefund.unicornvaluation.com US · AS14061 · DigitalOcean, LLC
    Phishing hostDigitalOceanAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 5 y ago
    DetailsHide
    Hostname
    opensearefundopensearefund.unicornvaluation.com
    First seen
    2026-10-28 20:32 UTC
    First published
    2026-10-28 21:24 UTC
    DNS
    Resolves · checked 2026-11-04 21:31 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 143.244.211.82.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 143.244.211.82
    4. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 19:29 UTC to 2027-01-26 19:29 UTC
    Logged 2026-10-28 20:28 UTC in IPng Networks Gouda2027h1, entry 251,913,614
    SHA-256 306d961461fad3d55dd7649befc6e3476b2bb058defa39d38d765ab9d0222e97
    Public key SHA-256 7b302c80aa6643c5d27415d79f1bd3bd8b763f8c82a566273de0704cf1958c23
    Brand
    OpenSea
    Addresses
    143.244.211.82 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (143.244.211.82): a cloud provider. It rents servers and addresses to its customers.
    Domain
    unicornvaluation.com
    Registered
    2021-12-15 · Interstellar Registrar Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  19. simat-de-la-valldigna.rrhh.opensea.com.es US · AS16509 · Amazon.com, Inc.
    ListedAmazon Web ServicesListed by MetaMaskMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    simat-de-la-valldigna.rrhh.opensea.com.es
    First seen
    2026-10-27 05:41 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Google PlumbersArms2027h1, entry 467,246,831
    SHA-256 235b3bd5a2856204992dd70629a87dd060e4a4e4008cd416063f1c032a55cfef
    Brand
    OpenSea
    Addresses
    3.123.199.169 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.123.199.169): a cloud provider. It rents servers and addresses to its customers.
    Domain
    opensea.com.es
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:28 UTC

    Suggest a correction

  20. opensea.lat DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    opensea.lat
    First seen
    2026-10-26 22:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 792,914,903
    SHA-256 903a0e04c7be808d982e8068af33fdf9bfbff55a47d4df82d7883e20458061b1
    PhishDestroy
    Brand
    OpenSea
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    opensea.lat
    Registered
    2026-10-01 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:24 UTC

    Suggest a correction

  21. www.opensea.lat DE · AS206834 · TEAMINTERNET-CA-AS Team Int…
    ReportedParking page · ParkingCrew (Team Internet)Under opensea.lat, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    www.opensea.lat
    First seen
    2026-10-26 22:26 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Reported
    PhishDestroy, listing opensea.lat and the names under it
    1. Observed in the PhishDestroy feed
    2. We matched its certificate name
    3. Latest DNS check
    Certificate
    Logged in Let's Encrypt Sycamore2027h1, entry 792,914,903
    SHA-256 903a0e04c7be808d982e8068af33fdf9bfbff55a47d4df82d7883e20458061b1
    PhishDestroy
    Brand
    OpenSea
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Domain
    opensea.lat
    Registered
    2026-10-01 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:24 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches OpenSea when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →