Is proj002mintinglive.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website on a free subdomain of a general-purpose web-hosting platform, with a name that suggests an NFT "minting" campaign. Its page title is "OpenSea.io", which borrows the name of a well-known NFT marketplace. It carries no verifiable brand or operator identity. Its apparent purpose is to lure visitors into a token-minting or marketplace-style interaction under borrowed branding, though automated page analysis could not independently characterize the page's full content.

Scam/Impersonation Risk

This site carries a confirmed, decisive reputational contradiction. A major browser safe-browsing service classifies it under its social-engineering category, which covers phishing and deceptive-page behavior. Multiple leading security vendors independently flag it as malicious, including several top-tier engines, and the combined detections confirm it as blacklisted. The page title presents the identity of an established NFT marketplace, yet the address is a generic hosting-platform subdomain whose project-style label ("proj002", "mintinglive") has no connection to that brand. That mismatch matches the pattern of a minting-lure page trading on borrowed brand recognition. Brand impersonation and phishing are not separately confirmed in the structured findings, but the blacklisting alone makes this an elevated-risk site for any sensitive interaction. Two abuse reports recorded against an address in the site's hosting range are discounted. They relate to shared provider infrastructure used by many unrelated tenants and are not attributed to this site, so the verdict rests on the threat-intelligence detections and not on them. The behavioral sandbox ran three times and observed no wallet-connection prompts, wallet-drainer routines, clipboard manipulation, hidden forms, or cloaking. That absence does not offset the detections, because the page's behavior can change and the safe-browsing classification is current. Evidence:

• Homepage: the page title reads "OpenSea.io" while the site is served from an unrelated hosting-platform subdomain, a brand-name mismatch.
• Safe-browsing classification of the site's address: social engineering (phishing-type), a current match.
• Reputation scan: 18 security engines flag the address as malicious, including four top-tier vendors; the kill-switch condition was triggered.
• Behavioral sandbox, homepage: 3 of 3 runs completed with no wallet, clipboard, or hidden-form activity, though roughly 90% of observed requests went to external hosts at peak and the console logged 3 errors.

Regulatory Verification Notes

No licensing, registration, or regulatory standing is evidenced for this site, and no independent link between it and any real-world brand or operator was established. Because page-content analysis was unavailable, the evidence contains no confirmed legal or identity pages to assess. Any regulated-marketplace or financial claim associated with the OpenSea title is therefore unsupported. Identity is treated as unverified, and no legitimacy is inferred from the site's presentation. This is a verification gap and is not itself evidence of fraud. The risk judgment above stands on the threat-intelligence findings. The site's technical hygiene is a minor mitigating factor only. The valid, long-dated certificate is organization-validated but belongs to the hosting platform, not to any marketplace or project operator. It therefore says nothing about who runs this page. Evidence:

• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organization Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Homepage: no operator, company, or licensing information was captured to link the site to the brand shown in its title.

What to Verify Next

Verification should start with the brand itself. The marketplace named in the page title should be asked, through its officially published support channel and not through anything on this site, whether it recognizes this address. Anyone who has already visited should check for unexpected signature requests, token approvals, or connected-wallet permissions, and review them through a trusted block-explorer or wallet-security tool. Anyone who entered credentials or a recovery phrase should treat them as compromised. If the site's owner is a victim of a compromise rather than the actor, current listing status can be rechecked later with the safe-browsing and threat-intelligence services after remediation. Evidence:

• Homepage: the OpenSea-style title has no corroborating link to the real marketplace's official domain.
• Safe-browsing and reputation listings: both are current, so the site's status should be rechecked only after the owner publicly remediates it.
• Identity assessment: the connection to any real-world brand or person remains unconfirmed.

Summary Verdict

The site is assessed as high-risk. Confirmed blacklisting and widespread security-vendor detections decisively outweigh its technical hygiene and the clean results from the behavioral sandbox. It should be treated as a probable social-engineering page that uses borrowed marketplace branding.

Infrastructure Integrity

The site is delivered through an AWS CDN/WAF layer. All four observed addresses are edge servers in the same Amazon network, and the origin server was not observable. This is a mitigating factor only. Edge-only visibility prevents independent verification of where the content is actually hosted and can mask rapid content swaps, and it cannot offset the threat-intelligence detections.

Closing Assessment

Account login, credential entry, wallet connection, signing or approving any transaction, and any payment or financial interaction should be avoided entirely. The site should not be treated as a trusted route to the marketplace it names. Safe use is limited to read-only viewing, ideally from an isolated environment. Organizations should block the address and report it to the impersonated brand's security team.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.