Is eventchecker-rb.netlify.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website, titled "Airdrop Eligibility Check", published on a free subdomain of a general-purpose web-hosting platform rather than on a domain of its own. It presents itself as a tool for checking whether a visitor qualifies for a promotional token airdrop. Its apparent purpose is to draw visitors into an eligibility-check flow that, in this format, is commonly used as a lure to collect wallet access or personal details.

Scam/Impersonation Risk

This site carries an elevated risk profile, and the contradictions are confirmed. It is blacklisted by multiple independent security detection sources. A substantial group of security engines classify it as malicious, including several tier-one vendors, and the external reputation layer treats the listing as decisive. The site's own content does not outweigh this. The "eligibility check" framing is a familiar entry point for credential-harvesting and wallet-targeting campaigns, where a claim of free value is used to prompt a sensitive action. Browser-behaviour testing did not catch an active wallet-drain routine, clipboard manipulation, hidden forms or page cloaking. That is only a point-in-time observation of what the page did during three test runs, and it does not offset the external detections. The testing did record an unusually high volume of script errors, which is consistent with a hastily assembled page. No conflicting legal identities and no explicit brand impersonation were observed. The contradictions rest on the blacklist and detection evidence alone. Evidence:

• Homepage: the page title and framing advertise an airdrop eligibility check, which is the core of the lure pattern described above.
• External reputation: sixteen security engines rate the site malicious and one rates it suspicious, with three tier-one vendors among the detections.
• Domain provenance: the domain was registered roughly 93 days ago (about 0.25 years old). The web archive holds a single snapshot, from 2026, so there is no established history.
• Behavioural testing of the homepage: 28 console errors across three runs, and six external POST requests, all to recognised destinations.

Regulatory Verification Notes

The evidence does not tie the site to any named legal entity, licence or registration, and no regulatory standing can be inferred for it. A token-distribution proposition would normally be expected to identify its operator and the project behind the airdrop. The third-party broker-reputation database returned no entry for the site, which is neutral context and not a regulatory verdict. The site's transport encryption is valid but is organisation-validated at the hosting-platform level. It confirms an encrypted connection to the platform, not the identity of whoever published this page. Evidence:

• Homepage: no operator, licence or registration details appear in the captured evidence.
• Hosting: served from AS16509 (Amazon), with the TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), valid to 2027-03-19.
• The certificate's subject organisation is the hosting platform, Netlify, Inc, not an independent operator.

What to Verify Next

Any airdrop claim should be checked against the announcements the supposed issuing project publishes through channels established independently of this page, such as its long-standing official site or verified social accounts. Prospective users should not follow links from this page to confirm it. A user who has already interacted with the page should review wallet token approvals and change any passwords entered. The hosting platform's abuse channel can also be notified so the page can be reviewed. Evidence:

• Homepage: the eligibility-check prompt is the only action the site presents, and it cannot be validated from within the site.
• External reputation: the detections apply to the site itself, so independent confirmation must come from outside it.

Summary Verdict

The overall posture is critical: the site is blacklisted by multiple independent detection sources, and its short, thin history and lure-style purpose are consistent with that rating. Technical hygiene, such as a valid certificate and mainstream hosting, is routine for platform-hosted pages and carries little weight against the confirmed threat detections. The operator remains unidentified.

Infrastructure Integrity

The site is delivered through Amazon-operated CDN edge infrastructure in the US, and all four observed addresses are edge servers. The origin server is not observable, so hosting cannot be independently verified and content can be swapped quickly. The edge presence is a mitigating factor only and does not offset the reputational findings. Two abuse reports exist against one of the edge addresses. They are attributed to shared provider infrastructure and are discounted, so they are not treated as evidence about this site.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction, and at most it should be viewed read-only from an isolated environment. Any airdrop it advertises should be treated as unconfirmed unless the issuing project confirms it through its own official channels.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.