Is exclusive-openseamints.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a page published on a free, shared hosting subdomain that presents itself as "OpenSea.io", the name of a well-known NFT marketplace. Its hostname frames it as an "exclusive" minting opportunity. It shows a visitor a single landing page and uses that branding to suggest a connection to an established NFT marketplace. Its apparent purpose is to draw visitors into NFT-minting or marketplace-style interactions under a borrowed brand name.

Scam/Impersonation Risk

This is the decisive area of concern, and confirmed contradictions are present. A major browser-protection service classifies the site as a social-engineering threat. Over twenty independent security engines also rate it malicious, among them several tier-one vendors, and an external blacklist listing is confirmed. The site is blacklisted by these sources, and the combined detections independently triggered a hard cap on its trust assessment. The page title claims the marketplace brand, while the hostname sits on a generic hosting platform with no link to that brand. Combined with the "exclusive mints" framing, this matches the pattern of a brand-lookalike lure aimed at wallet holders, and the page's owner has not been tied to any real-world brand or person. The behavioural sandbox found no wallet-drainer routines, clipboard tampering, hidden forms or cloaking. These clean results do not offset the external detections, because a lure page can be harmless until a visitor is routed onward. The sandbox did record a heavy share of outbound third-party requests and several script errors during page load. No conflicting legal identities were found. Evidence:

• Homepage: the page title presents the OpenSea brand on a hostname unrelated to that brand, with an "exclusive mints" naming pattern.
• External reputation: 23 security engines flag the domain as malicious and 1 as suspicious, and the browser-protection service lists it under the social-engineering category.
• Homepage sandbox, 3 runs: about 61% of requests went to external hosts at peak, with 12 external XHR/fetch calls, 6 external POSTs and 3 console errors, but no wallet-connect, drainer or clipboard events.

Regulatory Verification Notes

The analysis found no regulatory registration, financial licence or third-party regulated-entity record for this site. The collected page content shows no clear operator or licensing disclosure, and no broker-reputation record matches it. Because the site is apparently branded around a marketplace but cannot be connected to any verifiable operator, none of its claims about minting, exclusivity or marketplace affiliation can be treated as credible. The valid, mainstream-issued transport certificate shows only that the connection is encrypted. It says nothing about who runs the site or whether it is legitimate. Evidence:

• Homepage: the page carries no verifiable operator identity, licensing detail or regulator reference in the content captured.
• Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), with the host in the United States.
• Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27.

What to Verify Next

Any claim of association with the NFT marketplace should be checked only through that marketplace's official channels, reached by typing its known address directly or using its verified social accounts. It should not be checked through links, buttons or messages that lead to this site. Anyone who reached the page through a message, advertisement or social post should treat the sender or source as suspect and report it. Any wallet that has connected to the page, or any signature that was granted, should be reviewed. Where a connection or approval has already taken place, wallet permissions should be revoked and the assets moved to a fresh wallet. Official support and contact channels should be confirmed through the marketplace itself. Evidence:

• Homepage: the branded title and "exclusive mints" hostname are the claims requiring independent confirmation with the real marketplace.
• External reputation: the social-engineering classification indicates the page is intended to be reached through outbound lures rather than organic discovery.
• Sandbox observations: the heavy third-party request activity means any interaction could pass data or approvals to parties outside the site.

Summary Verdict

The deterministic assessment places the site at the lowest trust tier with an elevated risk posture. Multiple independent security sources confirm it as hostile, and the brand-bearing presentation fits an impersonation lure. Nothing in its technical hygiene or sandbox behaviour is sufficient to counter that conclusion, and the owner's real-world identity remains unestablished.

Infrastructure Integrity

The site is served from Amazon-hosted address space behind a trusted CDN/WAF platform. All observed addresses are edge servers, and the origin server was not observable, so the hosting cannot be independently verified. This is a mitigating factor only and does not offset the external threat detections. A large number of abuse reports exist against one of the edge addresses. They apply to an IP shared across many unrelated customers on the platform, so they are discounted and not attributed to this site. Evidence:

• Hosting infrastructure: edge addresses fall within AS16509, with a trusted CDN/WAF provider in front and no origin candidates visible.
• Shared-IP abuse data: 93 reports against 216.198.79.131, a shared CDN address with a zero abuse-confidence score and whitelisted status.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, transaction signing or any payment. Any viewing should be limited to read-only inspection from an isolated environment, and nothing should be downloaded from it. Security or fraud teams should consider blocking the domain and reporting it to the hosting platform and to the impersonated marketplace.

Signals weighed against the site

• AbuseIPDB: 93 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.