Is arbitrumquest.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

ArbQuest is a single-page promotional website, titled "ArbQuest — Arbitrum Airdrop Quest | Earn ARB Rewards on Arbitrum", that offers visitors a quest-style route to claiming ARB token rewards on the Arbitrum network. It is served from a free subdomain of a shared application-hosting platform rather than from a standalone registered domain. Its apparent purpose is to attract crypto-asset users with airdrop and reward promises, a format commonly used to lead visitors into wallet or credential interactions.

Scam/Impersonation Risk

The evidence shows confirmed adverse contradictions. Multiple independent reputation engines flag the site as malicious, including two well-established security vendors, and it is blacklisted by external threat-intelligence sources. Reputation records also carry a phishing indicator. This pattern matches the reward-claim lure that airdrop-themed sites usually rely on, where the promise of free tokens precedes a request to connect a wallet or sign a transaction. The subdomain also closely resembles the hosting platform's own domain name, which fits a lookalike or throwaway-deployment pattern. Several abuse reports are recorded against the shared hosting IP address. These belong to the platform's common infrastructure and are discounted, so they are not counted against the site itself. The page capture itself was benign in sandbox testing: it made no external calls, no wallet-connection attempts, no clipboard manipulation and no hidden forms. That shows the page was inert in the runs performed, but does not remove the externally confirmed detections, and behaviour can change after deployment. No conflicting legal identities were found, and the operator's real-world identity remains unestablished. Evidence:

• Homepage and hosting address: a majority of the reputation engines consulted returned malicious verdicts (11 malicious, 1 suspicious), and the external blacklist check was positive.
• Homepage title and content: airdrop and "earn ARB rewards" framing, with a captured page body of roughly 12,600 characters.
• Sandbox behaviour (3 of 3 runs successful): zero external requests, no wallet-connect or drainer behaviour, no hidden or external-posting password forms.
• Shared hosting address: 94 abuse reports, attributed to the shared provider and discounted.

Regulatory Verification Notes

No regulatory registration, licence or legal-entity disclosure could be established for the site, and independent verification of the operator's identity was not possible. Token-reward and airdrop promotions can fall under financial-promotion and securities rules in several jurisdictions, so the absence of any named operator or registry reference is material in this context. No third-party broker-reputation entry exists for the site, so there is no external regulatory signal in either direction. The site's technical hygiene is basic and does not offset the reputational findings: its transport encryption is valid but only domain-validated, which confirms an encrypted connection and nothing about who runs the site. Evidence:

• Transport encryption: TLS certificate issued by WR1 (DV), valid to 2026-11-27 with 29 days remaining.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN.
• Homepage: no operator name, licence reference or corporate registration was identified in the captured content.

What to Verify Next

The tokens, claims and any "claim" flow should be checked against the official Arbitrum channels and the ARB token's published distribution programme, which are reached independently of this site. Any airdrop eligibility should be confirmed only through a project's officially documented announcements. If a wallet was already connected, token approvals should be reviewed and revoked through a reputable allowance-management tool. Official support and contact channels should be confirmed through an independent route. Evidence:

• Homepage: it promises ARB rewards, which can be checked against Arbitrum's official announcements.
• Detection history: the recorded malicious flags and blacklist status should be re-checked with the reporting sources for later changes.
• Wallet exposure: on-chain approval records show whether any contract access was granted after visiting the site.

Summary Verdict

The site carries an elevated, clearly adverse risk posture. The external threat detections are decisive, and the site's inert behaviour in testing and its valid encryption do not outweigh them. Its operator is unverified and its reward-claim positioning matches a known fraud archetype.

Infrastructure Integrity

The site is delivered through a CDN/WAF layer on mainstream cloud infrastructure, and every observed IP address is an edge server. The true origin server was not observable. This mitigates direct exposure and shows the hosting is professionally operated, but it prevents independent verification of the origin and makes rapid content swaps easier to conceal. It is a mitigating factor only and gives no assurance of legitimacy.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection, transaction signing or financial interaction. Any use should be limited to passive, read-only viewing from a device and wallet that hold no meaningful assets. Anyone who has already interacted with it should review wallet approvals and rotate any exposed credentials.

Signals weighed against the site

• AbuseIPDB: 94 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.