Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
oshislabs.web.app is low-trust and potentially risky.
| What this site appears to be | A free NFT mint page for Oshi Labs' Studio PASS, with allocation split between Discord members and the public, wallet connection required, and a rewards and rankings system. No explicit return or yield promises appear, but the studio's legal identity and contact details are not verifiable from the page. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 3% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR4 | Noted |
| Hosted by | FASTLYServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a single-page NFT "Studio PASS" free-mint landing page for a project called Oshi Labs, which presents itself as an anime studio. The page, which carries English and Japanese language options, offers a limited supply of 2,222 free passes. It reserves 777 of them for Discord members, with the remainder opening to the public until the supply sells out. Visitors are directed to join a Discord server, connect a single wallet, and pay only network gas to claim a pass. Navigation also points to tasks, rankings and a personal "My page" area. Its apparent business model is community-building around a Web3 collectible, with a second "reward" tier marked "coming soon" and no stated revenue source.
Scam/Impersonation Risk
The assessment is cautionary because a confirmed external reputation listing exists. At least one major threat-reputation engine rates the site as malicious and another as suspicious, and this is decisive in the elevated risk posture. Beyond that listing, the evidence does not show classic fraud mechanics. No brand impersonation was detected, and no phishing page, credential form, hidden form or cloaking behaviour was observed. Controlled browsing runs also produced no wallet-drainer activity, no clipboard manipulation and no fingerprinting, and the page makes no return, yield or payout promises. The main open question is therefore why the listing exists. Possible explanations include a false positive on a newly deployed mint page, content on the site that the page capture did not reach, or genuine malicious use. The evidence cannot distinguish between them, so the listing must be treated as unresolved. Separately, abuse reports exist against a delivery-network address that the site resolves to. They apply to shared provider infrastructure rather than to this site specifically, so they are weak corroboration. The site runs on a shared application-hosting subdomain rather than a dedicated, independently registered domain, which gives it no standalone brand footprint. Wallet-connect mint flows of this type are also the standard route for approval-based asset theft when the underlying mint contract is malicious. The captured page text does not allow that contract to be inspected.
- Homepage: a free-mint call to action with a 777 Discord allocation inside a 2,222 total supply, requiring one wallet connection and gas payment only.
- Homepage: no yield, APR, leverage or payout claims, and no brand-impersonation indicators.
- Behavioural sandbox runs: no hidden forms, wallet-drainer or clipboard-hijack activity, and no cloaking.
- External reputation checks: one malicious and one suspicious detection against the domain.
Regulatory Verification Notes
The homepage links to Terms, Privacy and Disclaimer pages. It names no legal entity, company registration, physical address or contact channel for Oshi Labs, so the operator cannot be tied to any real-world person or company from the site itself. The business model is therefore classed as having an unverifiable legal status, and ownership and governance opacity apply. No licence or regulatory registration is claimed, and none is verified. For a digital-collectible mint that is a disclosure gap rather than evidence of wrongdoing. No third-party broker or regulator record matched this site. The mint's eligibility rules are also deferred to the moment of minting ("wallet limits and final eligibility rules are verified at mint time"), so the binding conditions are not visible beforehand.
- Homepage: no legal entity name, registration number or postal address for the studio.
- Homepage footer: Terms, Privacy and Disclaimer pages are linked, but no operator identity appears.
- Transport layer: the TLS certificate is a domain-validated one issued by WR4 and valid to 2026-12-22, which confirms encryption but not operator identity.
- Network: served from AS54113 (FASTLY - Fastly, Inc., US).
What to Verify Next
Before any wallet interaction, the official identity of Oshi Labs should be confirmed independently, for example through a Discord server and social accounts that are linked from a source other than this page. The smart contract address behind the mint should be obtained from such a channel and inspected on a block explorer. That inspection should cover its deployer, verified source code and any approval or transfer-permission functions. The 777 and 2,222 supply figures should be reconciled against the on-chain contract. The tasks, rankings and "coming soon" reward tier should be treated as unproven until the project publishes concrete, checkable terms. Official support and contact channels should be confirmed through an independent route.
- Homepage: the mint allocation figures (777 and 2,222) are stated on the page and can be tested against the on-chain contract.
- Homepage: the mint steps tell visitors to join Discord and connect one wallet, so Discord channel authenticity matters.
- Homepage: the reward tier is labelled "coming soon" with no terms, quantities or dates.
Summary Verdict
The site reads as a low-trust, elevated-risk property. A confirmed external reputation listing combines with an unverifiable operator identity, and these outweigh the technically clean page behaviour and the absence of overt fraud mechanics. The site's content is coherent and non-deceptive on its face. That coherence does not offset the unresolved listing or the lack of any identifiable accountable party.
Infrastructure Integrity
The site is delivered through Fastly, a mainstream CDN with WAF capability, and the network infrastructure is well-formed and consistent. This is a mitigating factor only. Both observed addresses are edge nodes and the origin server was not observable, so the real hosting source cannot be independently verified. The edge layer also means that site content could be changed quickly without that change being visible at the network level. Protective infrastructure does not offset the reputation risk.
Closing Assessment
Read-only viewing of the page is the only proportionate use at this time. The site should not be used for wallet connection, minting, login, credential entry or any financial transaction until the operator's identity and the mint contract are independently confirmed and the external listing is cleared.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by governance, external reputation, page content, registration and ownership, behaviour in a sandbox.
01 Governance
- What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified.Governance
rule:gov_business_model_cap
02 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
03 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
05 Behaviour in a sandbox
- The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of oshislabs.web.app.
- The request stayed on oshislabs.web.app. It was not redirected to another domain. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 3% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about oshislabs.web.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.