Is main-superintg.com a scam? TrustSniffer's high-risk assessment: 18/100

Security Alert

Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site titled "Super Intelligence SI276 | Airdrop". It presents a token-airdrop offer under an AI-themed "Super Intelligence" brand, and its apparent purpose is to draw visitors into a crypto-asset distribution or claim flow. The captured homepage returned a normal page with a substantial block of text, and no further pages were captured.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent security engines currently flag the domain as malicious, including a tier-one security vendor, and it is treated as a confirmed blacklist hit. No conflicting legal identities and no brand impersonation were observed. The elevated risk therefore rests on the third-party blacklisting, together with the domain's age (see Evidence) and its airdrop-themed lure. Airdrop pages of this kind are a well-known route for steering visitors toward wallet connection, signature requests, or "claim" fees. The automated behavioural testing did not reproduce any such mechanism. It recorded no wallet-connection prompts, wallet-drainer behaviour, clipboard tampering, hidden forms, credential posts to external hosts, or content cloaking. That absence is a mitigating observation about the tested session only, and it does not outweigh the blacklisting. A malicious payload could be introduced later, or shown only to certain visitors. Evidence:

• Homepage: the page title advertises an "airdrop" for "Super Intelligence SI276", which is a token-distribution lure rather than an identifiable product or service.
• Domain registration: registered 2026-10-11 (~10 days old), so the domain has essentially no operating track record.
• Web archive: 2 snapshots spanning 2026-10-11 to 2026-10-12, which only confirms that the site appeared within the last few days.
• Behavioural sandbox: three of three runs succeeded with stable responses, and no wallet, clipboard, form-exfiltration, or cloaking activity was detected.

Regulatory Verification Notes

The captured homepage presents no licence, registration number, legal-entity name, or jurisdiction of operation. No separate terms, privacy, or about pages were captured to assess. The site therefore offers nothing that ties its token distribution to an accountable operator or to any financial or securities regime. This is a verification gap and, on its own, would not indicate fraud. Here it compounds the reputational findings. The domain's registrant details are masked by a privacy service. This is an ordinary administrative practice and is not treated as an identity contradiction. No third-party regulatory or broker standing for this site was identified. Evidence:

• Registrar: registered through Tucows, with registrant name and organisation redacted for privacy and registration valid to 2027-10-11.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (domain-validated only), valid to 2027-01-09. Domain validation confirms control of the domain and says nothing about the operator's identity.
• Homepage: no company name, licence, or registry reference appears in the captured content.

What to Verify Next

Before any interaction, confirm through channels independent of this site whether a "Super Intelligence SI276" project and airdrop actually exist. Suitable routes include the project's official social accounts, an established token tracker, or announcements from an exchange or project the user already trusts. Any claim of an airdrop or token launch that cannot be corroborated this way should be treated as unsubstantiated. The domain should also be compared against the official project domain, and it should be rechecked later against current threat-intelligence listings, since an active listing is the main reason for concern. Official support and contact channels should be established through an independent, offline route and not through anything linked from the page. Evidence:

• Homepage: the airdrop offer is the only content captured, with no whitepaper, team, audit, or contract reference to check against.
• Reputation: the current malicious listings are the principal item to recheck, and a later clean result would not by itself establish legitimacy.
• Domain timeline: a domain created within the last two weeks can only be corroborated by sources outside the site.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Confirmed adverse reputation from multiple security sources, combined with a brand-new domain and an airdrop-style lure, outweighs the technically orderly behaviour observed during testing. Operator identity remains unverified and the site cannot be regarded as legitimate on the evidence available.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge address. The origin server was not observable. This is a mitigating factor only, since edge-only visibility prevents independent hosting verification and can mask rapid content changes behind the same front end. The certificate is valid. Such protections are common to legitimate and malicious sites alike and cannot offset the external threat detections.

Closing Assessment

The site should be treated as read-only at most. No account login, credential entry, wallet connection, transaction signing, or payment of any kind should take place, and no files should be downloaded from it. Anyone who has already interacted with it should disconnect and revoke any wallet permissions granted, and should change any reused passwords.