Is bigd-meme.web.app a scam? TrustSniffer's high-risk assessment: 12/100

Overview

BigD Web3 is a single-page, web3-themed site on a free Firebase-style application subdomain. Its title is "BigD Web3" and its hostname carries the word "meme", which suggests a meme-token or crypto community project. The homepage loads normally and serves a modest amount of text. The available evidence does not show a product, service or business model, so the site's purpose cannot be stated with confidence.

Scam/Impersonation Risk

The site carries confirmed adverse reputation signals. Several threat-intelligence engines currently rate the domain as malicious, and one more rates it as suspicious. The external blacklist indicator is active. Together these amount to a blacklisting that makes this a high-risk site. The evidence does not show brand impersonation, conflicting legal identities or a confirmed phishing page, so the risk comes from the third-party detections and not from visible deception on the page. The site is also very young, with thin and recent web-archive coverage. A newly stood-up crypto-themed page on a disposable-style hosting subdomain fits a pattern often used for short-lived token promotions and credential or wallet lures. The detections therefore cannot be dismissed as noise. In sandbox runs the homepage showed no wallet-connection prompts, no wallet-draining behaviour, no clipboard manipulation, no hidden forms and no content cloaking. These clean results are mitigating but do not offset the external detections. Network activity was dominated by external calls, but every external destination was a recognised service. Evidence:

• Homepage reputation check: 2 engines flag the domain as malicious and 1 as suspicious, and the external blacklist indicator is set.
• Domain age: about 51 days (~0.14 years), so the site is newly created.
• Web archive: 3 snapshots spanning 2026-09-04 to 2026-09-22 (1 year tracked), which indicates a thin history.
• Homepage behaviour: 3 of 3 sandbox runs completed with no wallet-drainer, clipboard-hijack, hidden-form or cloaking indicators.

Regulatory Verification Notes

The evidence links the site to no licensing, registration or accountable legal entity, and its real-world operator has not been independently verified. Any claim of legitimacy would therefore rest on assertion and not on verification. No legal or identity page was assessed, so the site's own disclosures give no basis for offsetting the adverse reputation findings. The site offers no corporate or regulatory standing on which an institution could rely. Standard technical hygiene is present: the transport encryption is valid and issued by a recognised authority. Domain-validated certificates are cheap and quick to obtain and say nothing about the operator's identity or intent. Evidence:

• Site hosting: served from AS54113 (Fastly, US).
• Transport encryption: TLS certificate issued by WR4 (DV), valid to 2026-12-22 with 57 days remaining.
• Homepage: no licence, registration number or named operator is associated with the site in the evidence.

What to Verify Next

Before any engagement, the operator and any associated token or project should be traced through independent routes. Official project channels, a named team and a verifiable contract or registry entry are the starting points. If the site presents financial or investment-like offerings, the relevant financial regulator's public register should be checked for the named operator. The threat-listing status should be re-checked after a reasonable interval, because a clean re-scan on a young domain does not prove it was benign. Any contact channels should be confirmed through an independent, offline route and not through links on the page. Evidence:

• Homepage sandbox: 9 external requests were observed, all to recognised services, with a peak external share of about 85% of traffic. Destinations should be reviewed if the site is re-tested.
• Homepage: no wallet-connection prompt was triggered in sandbox runs, so any later change to that behaviour is a signal to re-assess.
• Web archive: only 3 snapshots exist, so little baseline is available against which to detect future content swaps.

Summary Verdict

The site is assessed at an elevated, clearly cautionary risk level. A young and unattributed web3-themed property with active third-party malicious detections cannot be treated as trustworthy. Its clean sandbox behaviour and valid encryption are not enough to counter the reputation findings.

Infrastructure Integrity

The site is delivered through Fastly's CDN/WAF, and all observed addresses are edge servers, so the origin host is not visible. This is a mitigating factor only. It shows that mainstream infrastructure is in use, but it cannot verify who operates the content. Edge-only visibility also makes it harder to verify hosting independently and could mask a rapid content swap. The four abuse reports recorded against a shared edge address are low-confidence and belong to the shared provider infrastructure, not to this site specifically. They add little weight beyond the primary findings.

Closing Assessment

Treat the site as unsafe for signing in, submitting credentials, connecting a wallet or making any financial transaction. At most, limited read-only viewing is reasonable. Any further engagement should wait until the site's operator is independently identified and the threat detections have cleared.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.