Protect your wallet

How to spot fake OpenSea sites

OpenSea is a popular NFT marketplace, which makes it a frequent target for phishing. The only official domain is opensea.io. Everything else claiming to be OpenSea should be treated as suspicious.

Common fake OpenSea tricks

Look-alike letters

Domains that swap letters for similar characters, so opensea.io becomes something that looks identical at a glance.

Brand in a sub-part

Putting “opensea” in a subdomain or path of a domain the brand doesn't own, e.g. opensea.claim-xyz.top.

Bait pages

“Claim your OpenSea airdrop”, “restore OpenSea wallet”, “verify OpenSea account” — urgency to make you connect fast.

Checklist before you connect

  • Confirm the domain is exactly opensea.io — character by character.
  • Check for a padlock and no “xn--” prefix in the address bar.
  • Never sign a request you don't understand — especially unlimited approvals.
  • Use a security extension that flags fake OpenSea domains automatically.

Trust Line catches fake OpenSea sites for you

Trust Line compares every domain you visit against OpenSea's real address using on-device heuristics, and blocks impersonators before they load.

أضِفه إلى المتصفّح — مجّانًا