Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
openseaio102.vercel.app shows high-risk / scam indicators.
| What this site appears to be | Client-rendered NFT marketplace shell branded 'OpenSea' showing empty Collections, Tokens and Items lists, a 'Something Went Wrong' error, a 'Connect Wallet' button, and Terms of Service and Privacy Policy links. No login form, payment form, or seed-phrase or private-key request is visible in the supplied text. The domain cannot be verified because no URL was supplied. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 103 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a client-rendered web page branded "OpenSea" that presents itself as "The largest NFT marketplace". It is served from a generic third-party hosting subdomain, not a brand-owned domain. The visible interface is a navigation shell (Collections, Tokens, Items, Accounts, Trending Collections, Top Tokens, Stats, Activity, Rewards, Studio) with a prominent "Connect Wallet" button. Every listing area is empty, and the page shows a "Something Went Wrong" error. Its apparent purpose is an NFT marketplace where visitors connect a crypto wallet to browse, buy and sell digital collectibles, with revenue presumably from trade fees. That revenue model is inferred and not stated on the page.
Scam/Impersonation Risk
Material contradictory signals are present. The site is blacklisted. A major browser safe-browsing service classifies it as a social-engineering threat. A large cluster of independent security engines, including several top-tier vendors, flag it as malicious. A separate external blacklist signal corroborates both. This convergence is decisive and overrides every mitigating factor. The structure also fits a known abuse pattern. A world-famous marketplace brand and its tagline sit on an unrelated, free-tier-style hosting subdomain, and the domain name appends extra characters to the brand. The "Connect Wallet" call to action is the only functional element. On a page that is empty and erroring, a wallet connection offers no real marketplace function, and a malicious page could use it to attempt wallet-draining or fraudulent transaction signing. The behavioural capture did not observe wallet-drainer activity, clipboard hijacking, hidden forms or external data posts, so the evidence is limited to the reputational detections and the branding mismatch. No conflicting legal identities were found and no phishing form was visible. The detections and the brand-on-foreign-domain pattern still justify treating the site as an active threat to anyone connecting a wallet.
- Homepage: the interface carries the "OpenSea" name and "The largest NFT marketplace" claim, while the domain is an unrelated hosting subdomain with a brand-like prefix. The page has no title or descriptive metadata.
- Homepage: all listing categories return "No ... Found", an error banner is displayed, and "Connect Wallet" appears in the header and body.
- Reputation: the safe-browsing verdict is social engineering, and multiple top-tier security vendors independently flag the site as malicious.
- Behaviour: three successful sandbox runs showed no external network activity, no wallet-drainer or clipboard-hijack behaviour and no cloaking.
Regulatory Verification Notes
The visible page names no operating company, address, registration number or licence. It offers only Terms of Service and Privacy Policy links, and their content was not supplied for review. Because the site uses a famous brand, the absence of any entity disclosure is material. Nothing independently connects this site to the genuine marketplace operator, and its real-world operator identity remains unverified. No licence is claimed, so none can be checked, and no third-party broker or regulatory-database entry matched this site. The transport layer is basic and gives no assurance of legitimacy. The certificate is domain-validated only, which proves control of the domain and says nothing about the operator.
- Homepage footer: Terms of Service and Privacy Policy links are present, with no named legal entity, address or licence reference anywhere in the captured text.
- Site hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
- Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27, with 37 days remaining.
- Third-party broker and regulatory-database matching returned no entry for this site.
What to Verify Next
Anyone seeking the real marketplace should navigate only through the brand's officially published address, obtained from an independent source such as the brand's verified social profiles or an established app listing. They should not use this domain or any link that led to it. Any wallet that has already connected to this site should have its token approvals reviewed and revoked with a reputable approvals-management tool. If a transaction was signed, assets should be moved to a fresh wallet. Where the site was reached through a message, advertisement or social post, that source should be reported and the official support channel of the genuine brand notified. Any claimed affiliation should be confirmed through the brand's own official channels, not through contact details on this page.
- Homepage: the only interactive element is wallet connection, so any harm would arise at that step.
- Homepage: the branded identity cannot be reconciled with the hosting subdomain it appears on.
- Terms of Service and Privacy Policy: no entity or contact route was captured, so independent confirmation through brand-controlled channels is the only reliable check.
Summary Verdict
Overall, the assessment is critically adverse. Confirmed threat detections from independent sources, together with the branded-marketplace presentation on an unaffiliated domain, place this site in an elevated-risk category. The absence of overtly malicious behaviour in the captured page does not offset these findings. The site should be treated as a credible social-engineering and wallet-compromise vector, and its legitimacy is not supported by the available evidence.
Infrastructure Integrity
The site sits behind a trusted, mainstream CDN/WAF platform on Amazon-hosted address space, and all eight observed addresses are edge servers. The origin server was not visible. This is a mitigating factor only. It shows the site runs on reputable shared infrastructure and gives no evidence of legitimacy. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content swaps. A large volume of abuse reports exists for the shared edge address. These were attributed to the platform provider's shared address pool, not to this site specifically, and were discounted accordingly. The reputation risk arises from the domain's own threat listings. Protective infrastructure cannot offset them.
Closing Assessment
This site should not be used for login, wallet connection, credential entry or any financial interaction. Read-only viewing is the only tolerable use, and it is best avoided in favour of the brand's officially published address.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED - The page has no title, which almost every website sets.Page content
rule:PAGE_TITLE_MISSING - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 103 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of openseaio102.vercel.app.
- The request stayed on openseaio102.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.195 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 0% confidence, 103 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about openseaio102.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.