Security Scan: OpenSea.io

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b2e02c62-f16e-43d7-90b7-eb9f0ee10171 Domain and IP registration (RDAP)/api/v1/rdap/b2e02c62-f16e-43d7-90b7-eb9f0ee10171How often this domain was scanned/api/v1/domain/stats/gentle-cat-8faf10.netlify.app Scan history for this domain/api/v1/domain/history/gentle-cat-8faf10.netlify.app?limit=15

This website contacted 18 IPs in 2 countries across 14 domains to perform 46 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://gentle-cat-8faf10.netlify.app/

Effective URL:

https://gentle-cat-8faf10.netlify.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake OpenSea 'Mystery Box' airdrop on a netlify.app subdomain that connects to Arbitrum RPC endpoints to obtain a wallet approval; Safe Browsing social-engineering hit and CRITICAL EtherHiding exfiltration alerts confirm a wallet drainer.

Risk Factors (6)

Brand impersonation of OpenSea on a mismatched, unranked netlify.app subdomain

Crypto wallet-drainer pattern: Web3Modal/wallet-connect plus Arbitrum RPC endpoints soliciting an approval transaction

Google Safe Browsing Social Engineering verdict

CRITICAL IDS malware exfiltration alerts (EtherHiding Exfil M2)

Fake scarcity/urgency and unverifiable reward claims designed to induce a wallet signature

No legitimate disclosure that this is a third-party page; 'verified smart contract' claim is unsubstantiated marketing copy

Domain age information unavailable

Details

Page Title

OpenSea.io

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

The domain 'gentle-cat-8faf10.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'gentle-cat-8faf10'. The registrable portion 'netlify' spans 7 characters containing 2 vowels alongside 5 consonants. Splitting it apart reveals three words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.72s

Total Load Time

9.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,766 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain87% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

87%

finance banking

64%

e-commerce shopping

59%

healthcare medical

59%

documentation technical

57%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	216.198.79.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	64.29.17.3Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	172.66.171.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.77.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
46	18	-	-