Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
amemecoin.xyz shows high-risk / scam indicators.
| What this site appears to be | A meme-coin landing page for $MEME (contract 0x385f…1e18, described as running on Robinhood Chain) that promotes an airdrop claim and a wallet connection, with no verifiable team, legal identity, audit or contact details. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.9 years oldRegistered history | Clear |
| Web archive | Archived since 20249 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
$MEME is a single-page meme-coin landing page branded "AMC – A Meme Coin. Same People. Bigger Stories." It shows a token contract address (0x385f…1e18) and says the token runs on "Robinhood Chain". The page offers only a "Connect Wallet" button and a "Claim Airdrop" button. It carries Home, Airdrop, About and Token navigation entries, but the page contains no substantive content behind them. The apparent business model is token speculation driven by an airdrop and community interest. No team, treasury, tokenomics or revenue source is disclosed.
Scam/Impersonation Risk
This is a clearly cautionary assessment. Contradictory signals are present, and they converge. Third-party reputation sources currently flag the domain as malicious, and it is blacklisted on that basis. Behavioral testing also found strong cloaking: the page's content and appearance changed materially after interaction, compared with what loads initially. A page that shows one thing on arrival and another after a click is a classic pattern for hiding a wallet-draining or claim-based lure. The only calls to action are an airdrop claim and a wallet connection, and that combination heightens the concern. In this case no wallet-drainer activity, clipboard hijacking or credential form was triggered during the test runs. No brand impersonation or conflicting legal identities were found. The "Robinhood Chain" reference is an unsubstantiated positioning claim, not a confirmed impersonation. The domain's registration record is also very recent for a project that presents itself as established ("Same People. Bigger Stories"). The slogan implies a prior team or following that the page never identifies. Together these points make the airdrop claim path unsafe for any wallet that holds value.
- Homepage: the only interactive elements are a wallet-connection button and an airdrop-claim button. There is no team, audit, documentation or social link.
- Homepage behavior: content changed after interaction, which indicates strong cloaking.
- Domain provenance: the registration record dates from 2026-09-04 (about 46 days old, ~0.13 years). The web archive holds only 9 snapshots spanning 2024–2025 (2 years tracked).
- Third-party reputation: several independent security sources flag the domain as malicious or suspicious.
Regulatory Verification Notes
The site gives no legal entity name, jurisdiction, license, registration number, physical address or contact channel. For a token that asks visitors to connect a wallet, this is a material disclosure gap. It is not proof of wrongdoing on its own, but it removes any accountable party. The project makes no regulated-activity claim, and none can be checked. Ownership opacity applies here: the registrant is incomplete in the registration record, and the registration was made through NICENIC International Group Co., Limited. No third-party broker or regulatory-database match exists for this site.
- Homepage and navigation entries: no legal, terms, privacy or about content discloses an operator, licence or registered address.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: a domain-validated TLS certificate issued by WE1, valid to 2026-12-03 (43 days remaining). Domain-validated certificates confirm control of the domain, not the identity of the operator.
- Registration: registered through NICENIC International Group Co., Limited, with expiry on 2027-09-04.
What to Verify Next
The following checks apply only to read-only research. Independently confirm whether the $MEME contract is genuinely deployed on the claimed chain, using a public block explorer. Check the contract's deployer, holder concentration, liquidity lock and any ability to mint or restrict transfers. Seek the project's official channels through an independent route, not through links on this page. Look for a named team, an audit report and community discussion from established sources. Confirm that any "Robinhood Chain" association is acknowledged by the platform itself. Finally, check whether the sources currently flagging the domain have since delisted it. A delisting would change this picture only if the cloaking behavior is also explained.
- Homepage: the contract address is the only verifiable on-page artifact and can be checked on-chain.
- Homepage: the chain affiliation is asserted without any link or documentation.
- Reputation sources: the current malicious flags are the key item to re-check over time.
Summary Verdict
The overall posture is high-risk. Convergent threat-intelligence flags, concealed page behavior and a total lack of accountable identity outweigh the standard encryption and the mainstream hosting. The available evidence does not support treating this site as a legitimate token project.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server is not visible. Protective infrastructure like this is only a mitigating factor. It cannot offset the reputation and behavioral findings above. Because only the edge is visible, the true hosting cannot be verified independently, and the page content could be swapped quickly without any infrastructure signal changing. DNS shows a young domain with sparse subdomains, a typical profile for a short-lived campaign site.
Closing Assessment
The site should be limited to read-only viewing from a separate, non-funded browser environment. No wallet should be connected, no airdrop claimed, no credentials entered and no payment made until independent checks establish who operates the project.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
03 Hosting and network
- The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of amemecoin.xyz.
- The request stayed on amemecoin.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-04. Noted
- The earliest public archive of this site is from 2024-11-16. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3037::6815:3f4 |
| Name servers | ASHTON.NS.CLOUDFLARE.COM, MARIAH.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-03 |
| Domain age | 1.92 years (continuous registration) |
| Domain expiry | 2027-09-04 |
| Archive first seen | 2024-11-16 |
| Archive snapshots | 9 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about amemecoin.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.