Is dawaid-sessionmints.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site served from a free-tier subdomain on a shared application-hosting platform. Its address pairs a personal-looking name with the word "sessionmints". The page declares itself under the title of a well-known NFT marketplace brand. It presents a web-application front end that loads substantial third-party content. Its apparent purpose is to pass as a crypto or NFT marketplace destination, a pattern commonly used to harvest wallet or account access.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The site is blacklisted by multiple independent threat-intelligence sources. These include a major browser-protection service that classifies it under its social-engineering (phishing-type) category, and a broad group of security vendors that flag it as malicious, among them several tier-one vendors. Together they trigger an automatic override of the trust assessment. The page title presents a recognised marketplace brand, yet the address sits in a throwaway subdomain namespace on a shared hosting platform that has no connection to that brand. The address also shows a high lookalike similarity to the platform's own domain. This combination is characteristic of brand-lookalike credential and wallet-harvesting pages. The domain is also very young. Sandbox runs on the page were mixed. They recorded no wallet-drainer behaviour, clipboard manipulation, hidden forms, or cloaking, and the external traffic went only to allow-listed destinations. However, the page loaded a very high share of its content from external sources, and external POST requests were made. Behaviour can change after capture, so these clean results do not offset the external detections. A small number of abuse reports exist against one of the shared edge addresses. They apply to infrastructure used by many tenants and are not attributed to this site on their own. Evidence:

• Homepage: the page title presents a well-known NFT marketplace brand while the address is an unrelated shared-platform subdomain.
• External reputation: browser-protection and multi-vendor security detections list the site as malicious, with phishing-type (social-engineering) classification.
• Domain provenance: registered in 2026 (~60 days old), with 1 archive snapshot dated 2026-08-26 (1 year tracked), so there is no established history.
• Behavioural sandbox: 3 of 3 runs completed with no wallet-connect, drainer, or clipboard activity, but up to 90.5% of requests were external and 3 console errors were logged.

Regulatory Verification Notes

The site discloses no regulator, licence, or registered legal entity. The evidence also gives no independent way to tie the site to any real-world business or the brand it presents. The transport certificate was issued to the hosting platform itself, not to the party running the page. It therefore confirms only encrypted transport and the platform's own identity, and it says nothing about who operates the content. Third-party broker intelligence returned no match for this site, so there is no reputational context from that source. These are verification gaps. The decisive concern is the external threat classification covered above. Evidence:

• Transport encryption: OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19; the subject is the platform, not a site operator.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US) in the United States.
• Homepage: no operator name, registration number, or licensing reference is tied to the marketplace identity the page claims.

What to Verify Next

Before any interaction, the claimed brand's own official channels should be reached independently, by typing the address manually or using a saved bookmark. That route should confirm whether this subdomain is an authorised property. Any link, message, or advertisement that led to this site should be traced to its source, and the source should be treated as suspect. If a wallet was connected or credentials were entered, the wallet's token approvals should be reviewed and revoked from a trusted tool, the affected passwords changed, and the activity reported to the impersonated brand's security team. Official support and contact channels should be confirmed independently, not through this site. Evidence:

• Homepage: the claimed brand identity cannot be matched to this address.
• Threat listings: the site remains listed as malicious by multiple independent sources, so any recheck should confirm the listings have been cleared.
• Sandbox: no wallet-connect prompts were triggered in testing, so exposure from past visits cannot be ruled out from this evidence alone.

Summary Verdict

Available evidence places this website in a critical, high-risk posture. Confirmed blacklisting by independent sources, a brand-lookalike presentation, and a very young domain with no verifiable operator converge on a likely phishing or credential-harvesting purpose. Technical hygiene such as valid encryption does not offset this.

Infrastructure Integrity

The site is delivered through an AWS-based CDN and edge layer. All observed addresses are edge endpoints, and the origin was not observable. This is a mitigating factor only. It reflects reputable shared infrastructure, not the legitimacy of the content served through it. Edge-only visibility also makes it harder to verify hosting independently and allows content to be swapped quickly.

Closing Assessment

The site should not be used for login, wallet connection, credential entry, or any financial or token-approval action. At most, treat it as read-only reference material, and best avoid it altogether. Block it in corporate filtering and report it to the impersonated brand and the hosting platform's abuse desk.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.