Is event-arbscan.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The domain event-arbscan.com presents to automated visitors a Cloudflare interstitial page titled as a suspected-phishing warning instead of any site content. Its hyphenated name pairs "event" with "arbscan", a pattern that resembles blockchain-explorer branding. The page captured was a short text-only challenge screen, so the site's commercial purpose or business model could not be established beyond that naming pattern. The domain is newly registered and sits behind a major content-delivery and bot-protection network.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors currently flag the domain as malicious or suspicious, and it is blacklisted by external threat-intelligence sources. The protective network in front of the site also served an interstitial labelling it as suspected phishing, which is consistent with those detections. No conflicting legal-entity names were observed, and no specific brand impersonation was confirmed. The explorer-style name, combined with the phishing designation and the very recent registration, fits the profile of a lookalike or lure domain used to harvest wallet or account credentials. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms, or credential posts to third parties. That finding does not outweigh the external detections, particularly because the page content was gated and the full user journey was not observable. Heavy third-party request activity and a high volume of script errors during page loads add to the unsettled picture. Evidence:

• Homepage: served a bot-challenge interstitial (access refused to the automated visitor) titled as a suspected-phishing warning.
• Domain registration: registered 2026-06-04 (~0.39 years old, about 144 days), a very young domain.
• Homepage behaviour: nearly all observed network activity went to external hosts, and the page produced numerous console errors across three consecutive test runs.
• Reputation: multiple tier-one security engines classify the domain as malicious, which triggered a critical external-detection override.

Regulatory Verification Notes

No licensing, registration number, or legal-entity disclosure could be assessed, because the only content reachable was the challenge interstitial rather than any legal, terms, or about page. The operator is not independently connected to any real-world company or person, and registration details are incomplete, which is ownership opacity and not an identity contradiction. No third-party broker or regulator listing matched this domain. The absence of a regulatory footprint is not evidence of wrongdoing on its own, but it leaves nothing to offset the threat-intelligence findings. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED; registration runs to 2027-06-04.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 at domain-validated (DV) level, valid to 2026-12-29 (63 days remaining). This confirms encrypted transport only, not operator identity.
• Broker and regulator context: no matching third-party broker record.

What to Verify Next

Any claim that this domain belongs to a legitimate blockchain explorer, event, or token platform should be checked against the official channel of that platform, reached independently (for example through a known bookmark or a published official social account, never through a link supplied by this domain). Anyone who has already visited the site should check whether a wallet was connected or credentials were entered and, if so, review and revoke wallet approvals and change the affected passwords. Organisations should check whether the domain appears in their own mail, messaging, or advertising traffic and block it at the gateway if so. A re-scan after the site's owner or the flagging vendors respond would show whether the listings have been withdrawn. Evidence:

• Homepage: the phishing-warning interstitial means no official branding or contact route could be confirmed from the domain itself.
• Registration: the domain was registered in mid-2026, so no long-standing independent reference to it can be expected.
• Third-party listings: several security engines currently list the domain, so any reference to it should be treated as unsafe until those listings clear.

Summary Verdict

The overall posture is high-risk. Confirmed external threat detections, a very young registration, and an unverified operator outweigh the technically valid encryption and behavioural cleanliness observed. The domain should be treated as a probable phishing or lure site, and the available evidence offers no basis for treating it as legitimate.

Infrastructure Integrity

The site sits entirely behind Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin host was not observable, so independent hosting verification is not possible. Bot protection is active and was the cause of the access refusal. This protection is a mitigating factor only. It speaks to the quality of the hosting platform and not to the intent of the site's operator, and it cannot offset the reputation findings.

Closing Assessment

The domain should not be used for login, credential entry, wallet connection, or any payment or financial interaction. At most it may be viewed passively from an isolated environment, and nothing should be downloaded from it. Security teams should consider blocking it and reporting any related solicitations they receive.