Is desk-stonk.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a single-page promotional site titled "STONK | Community Airdrop Claim · Solana". It presents itself to visitors as a claim portal for a community token distribution on the Solana blockchain. Its apparent purpose is to draw visitors into claiming a free crypto-asset allocation, a pattern that normally depends on connecting a wallet or approving on-chain transactions.

Scam/Impersonation Risk

The principal concern is that the domain is currently blacklisted by multiple independent threat-intelligence sources. Several detection engines independently rate it malicious, and a further engine rates it suspicious. This is a confirmed contradiction. It is not a soft reputational hint, and it is the decisive factor in the assessment. The domain was registered only weeks ago. A newly created domain offering a token "airdrop claim" is the typical profile of a short-lived crypto-lure campaign, and the registry data gives no counterweight such as a long operating history. The sandbox did not observe wallet-connection prompts, wallet-drainer behaviour, clipboard manipulation, hidden forms or password forms posting to third parties. These absences do not offset the blacklisting. Claim flows of this kind often reveal their harmful stage only after a wallet is linked or a transaction is signed, which an automated visit may not reach. The homepage also loaded very little first-party content. Nearly all of its network traffic went to external destinations, and the page produced repeated console errors, which suggests a thin front end that relies heavily on third-party resources. The sandbox did not confirm brand impersonation or conflicting legal identities, and the page's real-world operator remains unverified. Evidence:

• Domain registered 2026-09-11 (~40 days old, 0.11 years), so the domain is very young.
• Reputation checks on the domain: 3 engines malicious, 1 suspicious, plus an additional external blacklist hit.
• Homepage title advertises a "Community Airdrop Claim" on Solana, a high-risk crypto-lure archetype.
• Behavioural runs (3 of 3 successful): up to 97.6% external request share, 27 external XHR/fetch calls, 9 external POSTs, 12 console errors. No wallet-connect, drainer or clipboard-hijack activity was observed.

Regulatory Verification Notes

The homepage and its visible text give no basis for treating the site as a regulated or licensed operation. No licensing status, registered legal entity or named operator could be tied to the site. Token airdrops and claim portals are not normally licensed activities in themselves. The absence of such disclosures is therefore a verification gap, not proof of wrongdoing. No third-party broker or regulator listing matched this domain. Registration privacy is applied through the registrar. This is an administrative matter and is not treated as an identity contradiction. The site's transport encryption is valid, but it is a basic domain-validated certificate. Such a certificate confirms only that the connection is encrypted and carries no information about who operates the site. Evidence:

• Registrar is NameSilo, LLC, with registrant details masked by a privacy service. The registration runs to 2027-09-11.
• TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-10 with 49 days remaining.
• Served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• No licence, company registration number or operator identity is visible on the captured homepage.

What to Verify Next

Before any engagement, the claim of a "community airdrop" should be tested against the token project's own channels, reached by an independent route and not through links on this page. The reader should confirm that the project exists, that the airdrop has been announced by the project, and that this exact domain is the one it names. Any wallet-related request on the page should be treated as unverified until that confirmation exists. The operator's legal identity should be established through an independent corporate or regulatory registry search. Official contact channels should also be confirmed through an offline or otherwise independent route. If the domain is encountered in messages, social posts or ads, the sender or source should be checked, since airdrop lures are commonly spread through unsolicited outreach. Evidence:

• Homepage frames the offering as a Solana community airdrop claim, which makes confirmation of the project's own announcement the primary check.
• No operator or entity name is published on the captured homepage, so an independent registry search must start from the project name.
• The very recent registration date means no long-standing public record exists to rely on.

Summary Verdict

The site is assessed as a high-risk property with a clearly cautionary posture. Confirmed threat-intelligence detections, a very young domain and a crypto-claim lure profile converge on a conclusion that the site is unsuitable for any sensitive interaction. The supporting technical hygiene, such as valid encryption and stable page responses, is routine and does not mitigate that conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed IP address is a Cloudflare edge address. The origin server could not be observed. This protection is only a mitigating factor. It shields the origin, but it also prevents independent hosting verification and can mask rapid content changes. Cloudflare's bot challenge is active on the site. Protective infrastructure of this kind is widely used by legitimate and malicious sites alike, and it cannot offset the confirmed external detections. A few sparse subdomains on a young domain are an unconfirmed heuristic only.

Closing Assessment

The site should be treated as read-only at most, and ideally avoided altogether. No wallet should be connected, no transaction or message signed, no credentials entered and no funds or tokens committed. Anyone who has already interacted with the site should disconnect and revoke any wallet permissions granted to it, then move assets to a fresh wallet if there is any doubt.