Evidence verified October 26, 2026

Lookalike domains are impersonating OpenSea

This is a public evidence page from Scam Detective’s published research. The real OpenSea operates at opensea.io. The 1 domain below impersonates it — each with the corroborated evidence. Nothing here is a guess: every finding is backed by the independent sources listed further down the page.

1
Lookalike domains found
Critical
Overall risk level
3
Independent corroborating sources
October 26, 2026
Case verified
The evidence

Confirmed lookalike domains

Critical riskFake NFT marketplace — OpenSea impersonation on a lookalike domain

itokentrove.com

Registration profileRegistered March 26, 2026 via GoDaddy, with the registrant’s identity hidden behind WHOIS privacy
First seenLive at verification (October 2026); corroborated by a victim report on r/Scams
Evidence
  • Live and operating at verification, served through Cloudflare — an active platform taking deposits, not a parked page.
  • The page title impersonates the brand verbatim: “Everyone’s Favorite NFT Marketplace | Opensea | NFT | Web3 | Test wallet” — OpenSea’s name and marketplace positioning doing the persuading, on a domain the brand has never owned.
  • Registered March 26, 2026 via GoDaddy with the registrant hidden behind WHOIS privacy — a months-old domain fronting the real marketplace’s years of operating history at opensea.io.
  • Independently scored 46/100 by Gridinsoft’s public scam scanner — a third-party risk rating corroborating the pattern beyond our own scan.
  • A victim report on Reddit’s r/Scams documents a user depositing money into the site believing it was the real NFT marketplace — a corroborated loss, not just a scan finding.
  • The real OpenSea operates only at opensea.io; itokentrove.com has no connection to the brand.
The pattern

Red flags in this impersonation

  1. 01Wrong domain — the real marketplace is at opensea.io. itokentrove.com borrows the brand’s name and tagline in its page title while sitting on a completely unrelated domain.
  2. 02The verbatim brand tagline in the page title is itself the impersonation evidence — a clone doesn’t need to copy the domain to copy the pitch.
  3. 03Months-old, WHOIS-hidden registration — the real marketplace carries years of history; a 2026-registered lookalike carries none.
  4. 04Deposits into a platform you can’t verify against the brand’s own domain — crypto deposits are irreversible, which is exactly why impersonated marketplaces get built.
  5. 05A third-party scanner score in the risky band (Gridinsoft 46/100) on a site presenting itself as an established marketplace.
  6. 06Search-result placement — an impersonation page that surfaces beside the real marketplace for NFT queries catches exactly the users who don’t compare domains before depositing.
Independent confirmation

Who corroborates this evidence

Victim report on Reddit (r/Scams)

An independent victim report documents a user depositing money into itokentrove.com believing it was the real NFT marketplace — the corroborating loss pattern for this case.

Gridinsoft public scanner report

Gridinsoft’s public scanner independently scores itokentrove.com 46/100 — a third-party risk rating confirming the finding beyond our own scan.

Brand-domain mismatch

The real OpenSea operates at opensea.io; itokentrove.com has no connection to the brand, and nothing on OpenSea’s own properties references it.

Full investigative write-up: AI Cryptocurrency Investment Scams: How AI Is Making Crypto Fraud Harder to Spot.

See exactly what you get

The audit, opened up

Findings · Risk ratings · Takedown template

Below is an abbreviated sample from a real audit format — the same report structure every $29 audit follows. The brand and domains shown are an illustrative example; your audit researches the company name and official domain you enter and documents what it finds the same way.

Sample — from a real audit format
Report date: March 14
Brand impersonation audit
Harborline Supply Co.
Official domain: harborlinesupply.com · 6 findings (5 shown) · 2 High · 2 Medium · 1 Low
Findings — lookalike domains
DomainTypeRiskEvidence
harborline-supply.comFake storefrontHighFull copy of the official site — same logo placement, layout, and product photography. Checkout collects card details before account creation. Registered 9 days ago behind a privacy proxy.
harborl1nesupply.comTyposquatHighDigit-for-letter swap ("1" for "l"). Redirect chain lands on a replica storefront with a cloned login form. SSL certificate issued 4 days after registration.
harborlinesupply-outlet.shopFake outletMediumPoses as a discount outlet channel. No affiliation disclosed anywhere on the site; the footer copies Harborline's legal text verbatim.
getharborlinesupply.comLookalikeMediumRoutes brand-name search traffic to a survey-with-prize flow before offering any products. Registered in the same bulk batch as the fake storefront above.
harborlinesupply.shopLookalikeLowBrand-name domain, currently parked with no active checkout. Rated Low and flagged for a re-check in 30 days in case it activates.

+ 1 more finding in the full report, documented the same way. Report summary: active impersonation campaign — act on the two High-risk domains first.

Takedown-request template — excerpt
Subject: Takedown request — <lookalike-domain> To the Abuse Team at <registrar / hosting provider>, I am writing on behalf of Harborline Supply Co., owner of the trademark HARBORLINE SUPPLY and the official website harborlinesupply.com. The domain <lookalike-domain>, registered through your service on <registration date>, impersonates our brand to deceive our customers: 1. Copies our logo, site layout, and product photography 2. Operates a checkout that collects visitors' card details 3. Discloses no affiliation with our company We request the immediate suspension of <lookalike-domain> …

The full template ships pre-filled with your brand, your official domain, and each finding's evidence — one per high-risk domain, ready to send to its registrar or host.

Your $29 audit follows this exact format for your company — every lookalike, typosquat, and copycat store found, each with its evidence and risk rating, plus the takedown template. Delivered instantly after checkout.

One-time payment

We found this without being asked

A brand impersonation audit does the same sweep for your company: every lookalike domain, typosquat, and copycat store impersonating your brand — each with evidence and a risk rating, plus a ready-to-send takedown-request template. Delivered instantly, $29 one-time, no subscription.

Audit my brand — $29
Questions about this evidence, or need it for a takedown request? Email [email protected].
Not ready to buy?

Get the free OpenSea impersonation evidence pack

Every confirmed lookalike domain, the red-flag pattern, and the independent corroboration from this page — compiled into one file and emailed to you, free. Useful for your security or legal team even if you never buy anything from us.

Ready now? The brand impersonation audit sweeps your own company for every lookalike domain, typosquat, and copycat store — with evidence, risk ratings, and a takedown-request template. $29 one-time, delivered instantly, no subscription.

Other brand evidence pages
Corkcicle →StoneX →Fidelity →Owala →BrüMate →MrBeast →USPS →LEGO →AMLBot →Amazon →Huawei →Daniel Wellington →SodaStream →CurrentBody →Dreame →Grubhub →TikTok Shop →Ooni →Simple Modern →Vessi →Swig Life →Barefoot Dreams →Midsummer Agency →Grow & Convert →Wordibly →Labrys →Arctoris →Staffology by IRIS →KeenLogic →Dotinum →Vosyn →Merkle →THE OUTNET →Jelurida →Xeno →All evidence pages