Is clickfast-mint4.netlify.app a scam? TrustSniffer's high-risk assessment: 4/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website served from a free-tier Netlify subdomain. Its page title reads "OpenSea.io", the name of a well-known NFT marketplace, which suggests the page presents itself as that marketplace or a related access portal. The page captured at the site root carries only a short block of text and none of the usual signs of an operating business. Its apparent purpose is to trade on a recognised Web3 brand name, but the operator and business model cannot be independently established.

Scam/Impersonation Risk

This site carries elevated risk, with confirmed adverse reputation signals. A major browser-safety service classifies it as social engineering, a category that covers phishing and deceptive-site behaviour. Several leading security vendors independently flag it as malicious, and the combined detections amount to a confirmed blacklist listing. These are real contradictions, not inferences. They are reinforced by the mismatch between the page's borrowed marketplace title and its location on a throwaway subdomain of a general-purpose hosting platform. A genuine marketplace would operate from its own established domain. The domain was also created very recently. Its archive history is a single capture, so there is no record of prior legitimate operation. Automated interaction tests did not trigger wallet-connection prompts, clipboard tampering, hidden forms or cloaking. This is a mitigating observation about what the page did in testing, not evidence of safety. The page makes heavy use of third-party requests, with the large majority of its network activity going to external destinations. This is consistent with a thin template front-end that loads its logic and assets from elsewhere. The established threat listings carry decisive weight and override this benign behavioural result. Evidence:

• Homepage: the page title reads "OpenSea.io" while the site is served from a free Netlify subdomain, a lookalike pattern with no sign of a brand-owned domain.
• Hosting and domain provenance: the domain was registered about 0.25 years ago (~91 days). The web archive holds 1 snapshot, captured 2026-07-30, with 1 year tracked.
• Reputation: a major browser-safety service reports SOCIAL_ENGINEERING, and 16 security engines report malicious, including four tier-one vendors.
• Behaviour on the homepage: 12 external XHR/fetch requests and 6 external POSTs, all to whitelisted destinations. Up to 90.5% of network activity was external, and 3 console errors were logged.

Regulatory Verification Notes

The captured homepage discloses no legal entity, registration number, licence or regulator, and it contains no terms, privacy or about content that would establish who operates the site. For a site that apparently engages with NFT trading or wallet-linked activity, that absence is a disclosure gap. On its own it would be a verification item, not proof of wrongdoing. Here it sits alongside confirmed threat listings, so it adds weight to the cautionary reading. No third-party broker or regulatory-database record matches the site, so there is no external reputational context beyond the security detections already described. The transport certificate is real, but it is an organisation-validated certificate issued to the hosting platform, not to the site's operator. It shows only that the connection is encrypted and says nothing about who runs the page. Evidence:

• Homepage: no company name, licence number, regulator reference or physical address is presented.
• Transport encryption: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to the subject organisation Netlify, Inc, and valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN.

What to Verify Next

Any contact with this site should first be checked against the genuine marketplace brand it appears to reference. Its official domain and support channels should be confirmed through an independently sourced route, such as a bookmarked address, official social profiles or the platform's published documentation, and not through any link or button on this page. Anyone who has already visited the page and connected a wallet or signed a prompt should review wallet permissions and revoke any unrecognised approvals. Anyone who entered credentials should change them promptly. The site's owner or hosting platform, if reachable, should be asked to confirm that the page is an authorised property of the brand it names. Evidence:

• Homepage: the brand-style title is not matched by a brand-owned domain, so the page's relationship to the named marketplace is unsupported.
• Reputation: browser-safety and multi-vendor detections remain active, so the site should be treated as unconfirmed until those listings are cleared.
• Page content: no operator identity or support channel is published, so no on-site route exists for confirming authenticity.

Summary Verdict

The overall posture is one of elevated risk with an adverse reputation. Confirmed threat listings, a brand-style title on a disposable subdomain, a very recent registration and an absence of any traceable operator converge on a cautionary conclusion. The positive technical hygiene observed is routine for the hosting platform and does not offset the confirmed adverse findings.

Infrastructure Integrity

The site sits behind Amazon's cloud edge network, delivered through the hosting platform. All observed addresses are edge servers and the origin server was not observable. The infrastructure is reputable and acts only as a mitigating factor. It cannot offset the threat detections, and edge-only visibility means page content could be changed quickly without any change in how the site is hosted. Four abuse reports exist against one of the edge addresses, filed by a single reporter with minimal confidence. They concern shared provider infrastructure, not this site specifically, so they are given little weight.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. This means no wallet connections or transaction signing, no credential entry and no payments. If the genuine marketplace is the intended destination, it should be reached by typing its address directly or through a previously saved bookmark. Any recipient of a link to this page should be advised not to open it.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.