opencode.ai is blocked

[danielstauros]

The domain https://opencode.ai is blocked today.
It is heavily used.

[mertcangokgoz]

i am very curious about why this block was done, I have been wondering why I haven't been able to log in for hours.

[pasqualtroncone]

Hello,

This domain is being blocked because it is currently part of one of the lists that hBlock uses as sources:

• URLhaus

If you believe this is a false positive, you should report it to the URLhaus team through their contact form. Once upstream sources remove the domain from their entries, it will automatically be removed from hBlock within 24h.

If you wish, you can always include this domain in your allowed domains list file (/etc/hblock/allow.list). Refer to the allow list section in hblock --help or check the online manual to see all available options.

[pasqualtroncone]

Hello, @mertcangokgoz

Some follow-up on this, including an answer to the question about why the block happened.

Good news first: URLhaus has already removed opencode.ai from its database — its host page now shows "No records found", and the domain is gone from their hostfile. It will automatically disappear from hBlock within 24h; running hblock again after the next update will unblock it.

Regarding the reason: the exact report cannot be recovered because abuse.ch purges false-positive entries entirely. However, URLhaus has been tracking an active SmartLoader malware campaign since late June that distributes malicious ZIPs through dozens of fake GitHub repositories with opencode-themed names (opencode-benchmark-dashboard, opencode-anthropic-oauth, cursor-opencode-auth, etc. — see this entry for an example). Most likely the legitimate opencode.ai domain was mistakenly reported as part of that campaign around July 29 and removed by abuse.ch upon review a day later.