Is canopynetwork.icu a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, presented under the domain canopynetwork.icu, is a single-page promotional site titled as a claim guide and eligibility page for a "Canopy Network Airdrop (CNPY)". It presents itself to visitors as an entry point for checking eligibility for, and claiming, a cryptocurrency token distribution. Its apparent purpose is to funnel visitors into a token-claim workflow, a format commonly used both by legitimate projects and by fraudulent campaigns.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. Several independent security-reputation sources currently flag the domain as malicious, and the combined detections amount to a confirmed blacklisting. The detections do not specify a threat category, so the exact abuse type (phishing, malware or otherwise) is not established. No conflicting legal entities were found, so there is no identity contradiction. The domain itself is only weeks old, and its entire archived history consists of two captures from the same short period. It therefore has no track record that could offset the reputation findings. The homepage frames itself around an airdrop claim guide, which is the typical lure for wallet-connection and credential-harvesting schemes. This is a contextual risk factor, not a confirmed finding about this site's mechanics. In the sandbox the page loaded stably and showed no wallet prompts, external data submissions, hidden forms, clipboard manipulation or cloaking. That is a mild mitigating observation about the captured behaviour only. It does not override the external detections, and behaviour could change after any later content swap. Evidence:

• Homepage: the page title advertises an airdrop claim guide and eligibility check for a token named CNPY.
• Reputation: 11 malicious and 3 suspicious verdicts from external security sources, including several tier-one vendors.
• Domain provenance: registered 2026-08-26 (~0.16 years old, about 60 days), with a registration expiring 2027-08-26.
• Archive depth: 2 snapshots between 2026-09-04 and 2026-09-17 (1 year tracked).

Regulatory Verification Notes

The captured page provides no clear legal-entity, licensing or registration disclosure, and the real-world operator is not independently connected to any known brand or project. The site therefore cannot be treated as the official presence of any named network. No third-party broker or regulatory record matched this domain. That absence is neutral on its own, but it provides no regulatory assurance for a site soliciting token-claim activity. Registration was handled through a corporate registrar, Global Domain Group LLC. Registrar choice is an administrative detail and does not offset the reputation findings. The site also uses a low-cost, unrestricted generic TLD, which carries no institutional weight. Evidence:

• Homepage: no company name, licence number or regulator reference is discernible in the captured content.
• Transport encryption: TLS certificate issued by WE1, domain-validated (DV), valid to 2027-01-23. DV confirms only control of the domain, not the operator's identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

The airdrop's authenticity should be tested against the official channels of the genuine Canopy Network project. Those channels are its documentation, its verified social accounts and its official announcements. They must be reached independently, not through links on this site. The test is whether the project announces this domain, or any CNPY distribution, at all. Any eligibility or claim instruction found here should be treated as unconfirmed until the project itself confirms it. If a wallet was already connected, or a seed phrase or signature was supplied on this site, token approvals should be reviewed and revoked and the affected assets moved to a fresh wallet. Official support and contact channels should be confirmed through a separate, trusted route. Evidence:

• Homepage: the claim and eligibility framing is the only identifiable activity, and no project attribution is evident.
• Domain age: registration is only about two months old, which is too recent for a project's official distribution site to be assumed established.
• Archive record: only two captures in a two-week window, with no earlier history to corroborate a long-running project.

Summary Verdict

The overall posture is high-risk. The site carries confirmed adverse external reputation, a very recent origin and no independently verified operator. These outweigh the technical hygiene signals and the benign behaviour observed in the sandbox.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge nodes, so the origin server is not visible. This is a mitigating factor only. Edge-only visibility prevents independent hosting verification and can mask rapid content changes. Protective infrastructure of this kind does not establish legitimacy and cannot offset the external threat detections. The heuristic flag for a young domain with sparse subdomains is consistent with a newly stood-up property and is treated as unconfirmed.

Closing Assessment

Login, credential entry, wallet connection, token approvals and any financial interaction with this site should be avoided, and nothing should be downloaded from it. At most, the page may be viewed passively. Any claim should be pursued only through channels the genuine project has independently confirmed.