Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
hdgvd.xyz shows high-risk / scam indicators.
| What this site appears to be | Landing page promoting a BSC/BNB Chain airdrop with claimed 1:1 reserve mapping, live dividend/claim examples, and tiered referral incentives that boost rewards and speed manual review. Page prompts wallet connection to participate. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 7 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a crypto airdrop and token-claim landing page presenting BNB Chain/BSC participation, dividend-style rewards, reserve-mapping claims, and referral incentives. Its apparent business model depends on visitors connecting cryptocurrency wallets and recruiting additional participants to accelerate manual reward reviews and increase claimed distributions.
Scam/Impersonation Risk
The site presents a critical interaction risk. Its homepage promotes a BSC/BNB Chain airdrop with a claimed 1:1 mapping to real-asset reserves, displays purported dividend payments ranging from 15% to 28%, and offers escalating referral benefits, including faster review, an additional 50% reward, and a doubling of the final allocation. This combination creates a high-stakes value proposition with opaque funding and distribution mechanics, while the wallet-connection requirement exposes users to an unverified cryptocurrency payment and authorization flow. The page also states that rewards are manually reviewed and that inviting more participants improves both review speed and reward size, which is materially consistent with pyramid-like recruitment incentives. External security evidence records two malicious and two suspicious detections and a confirmed blacklist status. Interactive testing also identified substantial content or presentation changes after interaction, supporting concern that the page may not present a stable experience. These contradictions are threat- and reputation-based; no conflicting legal-entity names or confirmed brand impersonation were identified.
- Homepage: claims “1:1” reserve mapping, shows purported holding-dividend examples of 15%–28%, and requires wallet connection for participation.
- Homepage: referral tiers promise accelerated review, an additional 50% reward, doubled allocation, and community status for recruiting participants.
- Interactive behavior: three successful runs recorded 24 DOM mutations and a strong post-interaction cloaking classification.
- External reputation telemetry: 2 malicious detections, 2 suspicious detections, and confirmed blacklist records; domain registered 2026 (~0.02 years old) with 2 archive snapshots spanning 2026–2026 (1 year tracked).
Regulatory Verification Notes
The reviewed landing page does not identify a licensing authority, license number, corporate operator, or custodial framework for the financial and token-related claims. The real-world operator identity remains unverified, so the site's on-page assertions cannot establish who controls the scheme or whether any relevant regulatory permissions exist. A valid transport certificate and identifiable hosting arrangement are technical facts only; they do not validate the offering, its reserves, its reward calculations, or its authority to solicit wallet participation.
- Reviewed landing page: no licensing authority or license number is stated alongside the airdrop, dividend, or reserve claims.
- Hosting telemetry: served from AS400619, AROSS-AS - AROSSCLOUD INC., US.
- Transport security telemetry: TLS certificate issued by YR2, domain-validated (DV), valid to 2027-01-07.
What to Verify Next
Before any interaction beyond passive viewing, an independent review should confirm whether a real operator, registered entity, and applicable financial or digital-asset authorization exist through the relevant official registry. The advertised token contract, reserve claim, distribution mechanism, and reward history should be independently reconciled on a reputable blockchain explorer and through documentation obtained outside the site. Wallet permissions should be inspected in a controlled environment, with no signing, asset transfer, or approval granted unless the operator and transaction purpose have been independently established.
- Homepage: the stated reserve mapping and reward activity require independent on-chain reconciliation.
- Homepage: the manual review and referral structure requires independent confirmation of the operator, reward rules, and participant-fund flow.
- Wallet interaction surface: the site exposes a wallet-connect control rather than a conventional account form, requiring transaction-level authorization review.
Summary Verdict
The website has a critical trust posture and presents sensitive-interaction risk. Available evidence is inconsistent with safe reliance for wallet access, credentials, financial activity, or other actions that could create an irreversible user or asset impact. Passive observation is the only proportionate use supported by the evidence.
Infrastructure Integrity
The site resolves directly to hosting infrastructure without a detected CDN or WAF layer, with multiple addresses assessed as likely origin addresses. This reduces the mitigating value normally provided by an edge-protection layer and does not offset the site's external threat detections or page-level behavior.
- Hosting resolution: 10 unique addresses were identified, with 10 assessed as likely origin addresses.
- CDN/WAF telemetry: no CDN was detected and no infrastructure vendor was identified.
Closing Assessment
The site should not be used for wallet connection, credential submission, signing, deposits, or other financial activity unless independent operator, regulatory, and transaction-level checks produce clear affirmative results.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, several checks together.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of hdgvd.xyz.
- The request stayed on hdgvd.xyz. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by registrar-servers.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-09. Noted
- The earliest public archive of this site is from 2026-10-09. Clear
- It is hosted on AROSS-AS, from a server in HK. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | AROSS-AS - AROSSCLOUD INC., US |
| Country | HK |
| Server IP | 162.4.41.69 |
| Name servers | DNS1.REGISTRAR-SERVERS.COM, DNS2.REGISTRAR-SERVERS.COM |
| CDN / edge network | Not detected |
| Resolved IP addresses | 10 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 10 |
| SSL issuer | YR2 |
| SSL expiry | 2027-01-07 |
| Domain age | 0.02 years (continuous registration) |
| Domain expiry | 2027-10-09 |
| Archive first seen | 2026-10-09 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about hdgvd.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.