Security Scan: OpenSea.io

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e4122816-261b-40fc-a9b2-b6e1f0888464 Domain and IP registration (RDAP)/api/v1/rdap/e4122816-261b-40fc-a9b2-b6e1f0888464 Certificate Transparency/api/v1/ct/dawaid-sessionmints.netlify.app How often this domain was scanned/api/v1/domain/stats/dawaid-sessionmints.netlify.app Scan history for this domain/api/v1/domain/history/dawaid-sessionmints.netlify.app?limit=15

This website contacted 16 IPs in 2 countries across 14 domains to perform 46 HTTP transactions. The main domain is dawaid-sessionmints.netlify.app and was registered 10 years ago.

Submitted URL: http://dawaid-sessionmints.netlify.app/

Effective URL:

https://dawaid-sessionmints.netlify.app/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Wallet-drainer phishing site impersonating OpenSea Pro on a free netlify.app subdomain, using a fake Mystery Box airdrop to get victims to connect/approve their crypto wallets; CRITICAL EtherHiding malware IDS alerts confirm.

Risk Factors (7)

Brand impersonation of OpenSea Pro on a non-official netlify.app subdomain

Wallet drainer / approval-phishing infrastructure connecting to multiple Arbitrum RPC endpoints

CRITICAL IDS malware alert: ET MALWARE EtherHiding Exfil M2

Unsolicited 'free airdrop' with guaranteed high-value rewards and urgency (only 150 boxes)

Fabricated social proof and unverifiable 'verified smart contract' claims

8 Function() constructor calls indicating runtime code generation

Domain unranked in Cisco Umbrella; hosting-platform subdomain of unknown creation date

Domain age information unavailable

Details

Page Title

OpenSea.io

Scan Type

public

Favicon Hash

MMH3: -1742728723

MD5: e0dc6025f3ad91101529eaab3879cf79

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'dawaid-sessionmints.netlify.app' is registered with subdomain 'dawaid-sessionmints'. The core label 'netlify' covers 7 characters containing two vowels alongside 5 consonants. Word splitting yields three words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.50s

Total Load Time

9.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,766 chars

Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain87% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

cryptocurrency blockchain

87%

finance banking

64%

e-commerce shopping

59%

healthcare medical

59%

documentation technical

58%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	35.157.26.135Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	216.198.79.67Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	63.176.8.218Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
2	104.20.39.96Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.135.169Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.74.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.12.205Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
46	16	-	-