Is Block Bonez a scam? TrustSniffer's high-risk assessment of blockbonez.info: 3/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site on a newly registered .info domain. It presents itself as "Block Bonez," with a headline announcing that an NFT allocation is live and urging visitors to claim their tokens now. Its apparent purpose is a crypto token or NFT distribution campaign that pushes visitors toward a claim action.

Scam/Impersonation Risk

This is the dominant concern. Several independent threat-intelligence engines currently flag the domain as malicious, and three of them are major, widely used security vendors. The domain is blacklisted by external reputation sources, and that listing is the decisive reason for the cautionary assessment. The homepage's urgency-driven "claim your tokens now" framing is also a pattern commonly used in token-claim lures. The evidence does not show brand impersonation, conflicting legal identities, or a confirmed phishing page, and this report does not claim any. The homepage's runtime behavior was consistent across all test runs and showed no content cloaking, hidden forms, clipboard manipulation, or wallet-drainer activity. However, the page sent multiple data submissions and background requests to third-party destinations outside the site's own infrastructure, and several of those destinations are not recognized as common, benign services. A page that invites token claims while transmitting data externally warrants the same caution as the blacklisting itself. The domain's age profile compounds the concern. It is brand new and has almost no historical footprint, so there is no record of legitimate operation to offset the detections. Evidence:

• Homepage: the title advertises a live NFT allocation and urges visitors to "claim your tokens now," an urgency-based call to action.
• Homepage behavior: three submissions and six background requests to external destinations were recorded, with three of the submissions going to non-allow-listed destinations. Three console errors were also logged.
• Domain registered 2026-07-18 (~0.28 years old, about three months).
• Web archive: 1 snapshot, captured in 2026 (first and last seen 2026-07-22), covering 1 year tracked. No earlier history exists.

Regulatory Verification Notes

The site presents no regulatory, licensing, or corporate-registration information that could be assessed, and no legal entity can be tied to the "Block Bonez" name from the available material. Ownership of the domain is also incomplete in its registration record. This is an ownership-opacity limitation, not an identity contradiction, since no conflicting legal entities were observed. The domain was registered through NICENIC International Group Co., Limited. Third-party broker-reputation datasets hold no matching entry for the name, which is neutral information and not a regulatory verdict. A token or NFT distribution offered to the public would normally be accompanied by identifiable issuer details and terms, and none were captured here. Evidence:

• Homepage: no company name, licence, registration number, or terms of the token allocation were captured.
• Registration record: registrar NICENIC International Group Co., Limited; registration runs from 2026-07-18 to 2027-07-18, with owner details incomplete.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-14. This confirms an encrypted connection but says nothing about the operator's identity.
• Hosting network: AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the claimed allocation should be checked independently of this site. That means looking for an announcement from a project that can be corroborated through established, independently known channels, not links supplied on the page. Any named project, token, or issuing entity should be confirmed through a recognized registry or an official source reached separately. The official support and contact channels should likewise be confirmed through an offline or independent route. If the site's reputation status changes, a fresh assessment should be obtained before the conclusion is revisited. Evidence:

• Homepage: the allocation claim names no verifiable issuer, which is why independent corroboration is needed.
• The domain has only a single recent archive capture and no prior history, so the site's own past cannot support its claims.
• Current detections: the domain is flagged by multiple security engines, and the flagging must be cleared before the site can be treated as safe.

Summary Verdict

The site's overall posture is high-risk. Active, corroborated threat detections dominate the assessment, and the brand-new domain with no operating history offers no counterweight. The technical hygiene around the site does not change that outcome. Legitimacy cannot be established, and the site should not be treated as trustworthy.

Infrastructure Integrity

The site is served behind Cloudflare's CDN and WAF. All four observed addresses belong to Cloudflare edge servers, and the origin server was not observable. The transport encryption certificate is valid, and the hosting network is reputable and shows no abuse reports. This is a mitigating factor only: it reflects commodity protective infrastructure that any operator can use, and it cannot offset the external threat detections. Edge-only visibility also prevents independent verification of where the content is hosted and could conceal rapid content changes.

Closing Assessment

Viewing the page without interacting is the only appropriate use. Wallet connections, token or NFT claim actions, credential entry, and any payment or financial interaction should be avoided entirely. Anyone who has already interacted with the site should review their accounts and wallet permissions.