Is jubjub.meme a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

JubJub is a single-page, meme-themed website titled "A Note on the Bird, the Curve, and the Coin." The wording points to a meme-token project built on a bonding-curve launch, and the ".meme" domain fits that theme. The homepage presents an editorial-style note rather than a conventional product or service. Its apparent purpose is to promote a speculative crypto asset or community. The page content does not show a verifiable operator or a disclosed commercial model.

Scam/Impersonation Risk

This is the decisive area of concern. The domain carries a confirmed blacklist standing. Several tier-one security vendors currently classify it as malicious, and a larger group of detection engines agrees. That level of consensus on a domain this new is a strong adverse signal. It is a clear contradiction of any claim that the site is benign. The assessment found no conflicting legal entities and no specific brand being impersonated. The blacklist standing alone is serious enough to set a high-risk posture, because the site is a newly created crypto-themed property of the kind commonly used for token-promotion and wallet-targeting abuse. In the sandbox runs, the site made no cross-origin data submissions, requested no wallet connection, and showed no cloaking or hidden forms. This is a mitigating observation about behavior during testing. It does not offset the external detections, and it does not rule out later changes to the page. The sandbox also recorded a clipboard write on the homepage. No hijacking was observed, but this behavior is worth noting on a site that invites crypto-address interaction. Evidence:

• Homepage and domain-level reputation: multiple tier-one security vendors flag the site as malicious, with 11 engines reporting malicious and 1 suspicious.
• Domain registration: registered 2026-09-13 (~0.1 years, about 38 days old), so the site has essentially no reputational history.
• Web archive: 4 snapshots, all within 2026 (first seen 2026-09-13, last seen 2026-09-22), indicating a young and sparse history.
• Homepage behavior: three successful sandbox runs showed no external data posting, no wallet prompts and no cloaking, but a clipboard write was detected.

Regulatory Verification Notes

No licensing, registration or regulated-entity status could be tied to this site. No third-party broker or regulatory database record matched it, and this absence is neutral context rather than a verdict. The real-world operator is not independently identified, and registrant details are incomplete. This ownership opacity is a limit on accountability. It is not an identity contradiction. A newly registered crypto-themed property that offers no verifiable operator leaves visitors with no recourse if funds are lost. The site's own content cannot be treated as proof of identity or legitimacy. Evidence:

• Registration: domain registered through Dynadot LLC., with an expiry of 2027-09-13 and incomplete registrant detail.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is a DV certificate issued by YE2, valid to 2026-12-12 (51 days remaining). This confirms encryption only and says nothing about the operator.

What to Verify Next

Any claim of project legitimacy should be checked through channels that do not rely on this site. This means confirming the project and any token contract through independent, long-established sources, and confirming official social and support channels through an offline or separately verified route. If the site claims financial or regulated activity, that should be confirmed with the relevant public registry. Because the external detections are recent, the domain's standing should also be re-checked later. A clean result after remediation would change the picture, and a persistent listing would confirm it. Evidence:

• Homepage: it names a bird, a curve and a coin, but no operator or legal entity was identifiable from the page.
• Domain standing: the detections are current and based on a domain registered only weeks ago.
• Identity: no independent link to a known brand or person was established.

Summary Verdict

The evidence converges on a clearly elevated-risk posture. Current, multi-vendor malicious classification on a weeks-old domain with no verifiable operator or track record outweighs the technically sound encryption and the benign behavior seen in testing. Legitimacy cannot be inferred from the available evidence.

Infrastructure Integrity

The site is fronted by Cloudflare, and all four observed addresses are edge nodes, so the origin server could not be observed. This hides where the content actually lives and makes independent hosting verification impossible. It also allows content to be swapped quickly without a visible change in infrastructure. Protective infrastructure of this kind is only a mitigating factor. It cannot offset the reputation risk and says nothing about the legitimacy of the operator.

Closing Assessment

The site should be treated as unsafe for sensitive interaction. Credentials, wallet connections, token purchases and any financial transfers should be avoided. If the site must be viewed at all, it should be read-only, from an isolated environment, and nothing should be downloaded from it.