Security Scan: OpenSea.io

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7fa263ea-b50a-421d-badd-addda25f7960 Domain and IP registration (RDAP)/api/v1/rdap/7fa263ea-b50a-421d-badd-addda25f7960How often this domain was scanned/api/v1/domain/stats/zesty-horse-7b04a2.netlify.app Scan history for this domain/api/v1/domain/history/zesty-horse-7b04a2.netlify.app?limit=15

This website contacted 19 IPs in 2 countries across 14 domains to perform 45 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://zesty-horse-7b04a2.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Fake OpenSea Pro 'Mystery Box' airdrop on a disposable netlify.app subdomain that pushes wallet connection and approval to arbitrum RPCs — a reported wallet drainer with critical EtherHiding exfiltration IDS alerts. Do not connect a wallet.

Risk Factors (6)

Brand impersonation of OpenSea / OpenSea Pro on an unrelated netlify.app subdomain

Wallet-drainer infrastructure: blockchain RPC connections paired with an approval-request mint flow

Threat-intel report of wallet drainer (phishing) on the primary domain

CRITICAL IDS malware alert (EtherHiding Exfil M2) and multiple Netlify-phishing hunting alerts

Fabricated giveaway with unrealistic $3,000-$250,000 rewards and manufactured on-chain activity

Free instant-hosting subdomain with unknown creation date and no domain reputation

Domain age information unavailable

Details

Page Title

OpenSea.io

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Domain 'zesty-horse-7b04a2.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'zesty-horse-7b04a2'. The core label 'netlify' covers 7 characters split between two vowels and five consonants. Segmentation suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

|[@ mintwow | @) | [ # | & OpenSeaPro | Q Search items, collections, and accounts [By{OpenSeaProl@] (@] MINTING Now] now HNN 0x433002".07ea minted now MN 0x66d90c™.d3a4 minted now Ml 0x485d03.~.a36...

Page Load Overview

8.32s

Total Load Time

9.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,766 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain87% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

87%

finance banking

64%

e-commerce shopping

59%

healthcare medical

59%

documentation technical

57%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	64.29.17.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	216.198.79.195Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	104.20.39.96Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
45	19	-	-