Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
get-memecoins.netlify.app shows high-risk / scam indicators.
| What this site appears to be | A Solana token airdrop landing page for an unnamed $TOKEN asset. It prompts visitors to connect a wallet and access the airdrop, shows a live-looking claim feed and token statistics that are all blank or placeholder, and provides no contract address, team, legal identity, or contact details. The claim flow is a high-stakes wallet interaction with no verifiable supporting evidence. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 1% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page Solana token airdrop landing page for an unnamed "$TOKEN" asset, hosted as a subdomain on a free static-hosting platform. It tells visitors that an airdrop is "live" and asks them to connect a wallet to "access the airdrop". Alongside that call to action it shows a scrolling claim feed, market-data tiles, and a row of Solana ecosystem logos. Its apparent purpose is to funnel visitors into a wallet-connection flow. The page does not say how the operator benefits.
Scam/Impersonation Risk
The evidence is a hard contradiction set that supports a clearly cautionary stance. The site is on a confirmed blacklist: several external reputation sources currently flag it as malicious, and one major security vendor has independently flagged it. The homepage content matches the pattern of a wallet-claim lure. The page presents "Airdrop is live" and "Claim the $TOKEN airdrop now", but the token has no name, and the contract field is blank. Price, market cap, liquidity and 24-hour volume are all shown as dashes, while the page displays activity counters of 100,000 activity, 61,000 claims and 39,000 distribution. The "recent airdrop activity" feed shows truncated wallet addresses receiving payouts of roughly 1 to 2 SOL each, stamped one to a few seconds apart. These payouts are in SOL rather than in the advertised token, they follow an identical format, and they cannot be matched to any on-chain data on the page. This is consistent with a simulated feed designed to create urgency. A strip of ecosystem logos (BONK, Jito, Marinade, Metaplex, Orca, Pyth, SolBlaze) implies association with established Solana projects, but the page offers no evidence of any partnership. The page shows no team, legal entity, distribution terms or working contact route. A wallet-connect click here is therefore a high-stakes action with nothing verifiable behind it. Sandbox runs did not observe an active wallet-draining routine, hidden forms, cloaking or clipboard tampering, so the harm is the unverifiable claim flow, not observed malicious code. A lookalike match against the hosting platform's own domain also appeared. Because the site is just a subdomain on that platform, this is a weak, structural signal and not evidence of deliberate impersonation. A small number of abuse reports exist for one of the site's edge IP addresses, but they relate to a shared content-delivery address and cannot be attributed to this site alone. Evidence:
- Homepage: wallet-connect and "Access the airdrop" call to action, an empty contract field, and every market metric shown as a dash.
- Homepage: a "live" claim feed with identically formatted SOL payouts seconds apart, and ecosystem logo chips with no affiliation evidence.
- Page-level analysis: unverifiable legal status and contact details, an opaque flow of value to the operator, and a critical page-risk band.
- Reputation checks: multiple independent sources flag the site as malicious, and the blacklist hit is confirmed.
Regulatory Verification Notes
The page makes no claim of licensing, registration or regulatory oversight, and it names no operating company, jurisdiction, terms of service or privacy policy. Because the offering is a token distribution tied to wallet connection, this absence of any legal or governance disclosure is material. It is also consistent with the real-world operator being unverified and with the page's opaque ownership and governance. No third-party broker or regulatory record matched this site, so this section cannot draw on any independent reputational context. The one positive technical element is the site's transport encryption. It is a valid organisation-validated certificate, but it belongs to the hosting platform and covers the shared platform domain. It shows that the connection is encrypted and says nothing about who operates the airdrop. Evidence:
- Homepage: no company name, licence reference, legal terms or physical address anywhere on the page.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
- Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19 (149 days remaining at analysis).
What to Verify Next
Before any wallet interaction, the claim should be tested against independent sources. A genuine airdrop is announced through the issuing project's own established channels, such as its verified official site, social accounts or documentation, and not through an anonymous landing page. The token's mint address should be looked up on a public Solana block explorer to confirm that the token exists, has real holders, and that the "claims" shown correspond to on-chain transfers. The claimed ecosystem partners should be contacted through their own official channels to confirm or refute any relationship. Any official support or contact channel should also be confirmed through an independent route. If the site is ever used, it should be only for passive reading, and a wallet that holds no meaningful funds should be used for any test. Evidence:
- Homepage: the contract field is empty, so no mint address is available to look up.
- Homepage: the claim feed shows truncated wallet addresses that can be matched against chain data.
- Homepage: the partner logo row names seven Solana projects whose involvement is unconfirmed.
Summary Verdict
The available evidence supports an elevated-risk, clearly cautionary assessment. Confirmed external blacklisting, a content profile matching a wallet-claim lure, and an unverified operator all point the same way. Valid encryption and mainstream hosting do not offset them. The site should be treated as untrusted for any sensitive interaction.
Infrastructure Integrity
The site sits behind a CDN and web application firewall from a major cloud provider, and every observed address is an edge node. The origin server could not be observed. This is a mitigating factor only: it gives resilience and a clean network standing, but it also prevents independent verification of what is hosted behind the edge, and page content can be swapped quickly there without notice.
Closing Assessment
The site should not be used for logging in, connecting a wallet, signing transactions or any financial action. At most it can be viewed passively. Anyone who already interacted with it should revoke wallet permissions and move assets to a fresh wallet.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, several checks together.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of get-memecoins.netlify.app.
- The request stayed on get-memecoins.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::258 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 1% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about get-memecoins.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.