Is meme-giveaway.fun a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website operates under the domain "meme-giveaway.fun". The name points to a meme-token giveaway or promotional offering, a category that typically asks visitors to connect wallets or submit details in return for promised rewards. The site's main page could not be rendered as an ordinary storefront or application. The capture returned only a short security interstitial titled as a suspected phishing page, so no genuine product pages, terms or company information were retrieved.

Scam/Impersonation Risk

This is the decisive section. The domain is blacklisted: several major security vendors currently classify it as malicious or suspicious, and a phishing designation is attached to it. No brand impersonation or conflicting legal identities were observed, so the risk does not come from identity contradictions. It comes from the active blacklist and phishing listing, which together make this a high-risk site. The domain's name and format fit a giveaway lure: a recently created address built around "free" meme rewards. Behavioural testing showed no wallet-connection prompts, clipboard tampering, hidden forms or credential posts to unapproved destinations. That does not reduce the risk. The page was gated by a challenge, so deeper flows such as claim, connect or onboarding steps were probably never reached. The page also made a very large volume of requests to outside resources, with heavy DOM rewriting after interaction and repeated script errors. This is consistent with a thin shell that loads content dynamically and can change quickly. Any sensitive interaction, including wallet connection, signing, credential entry or payment, should be treated as unsafe. Evidence:

• Homepage: the capture returned a bot-challenge page titled as suspected phishing, with an access-denied status and only a few hundred characters of text.
• Domain provenance: registered in 2026 (~0.18 years, ~66 days old); 35 archive snapshots, all from 2026 (1 year tracked).
• Reputation: 9 malicious and 2 suspicious detections, including three major security vendors, and an external blacklist hit.
• Behavioural testing: 50 external XHR requests and 5 external POSTs across 3 runs, 10 console errors, and 1,503 DOM mutations after interaction; no wallet-drainer, clipboard-hijack or hidden-form activity.

Regulatory Verification Notes

No licensing, registration or company information could be retrieved from the site, and on-page disclosure remains unclear. This is a verification gap and not, by itself, proof of wrongdoing. Here it adds to the blacklist and phishing listing. The operator is not identified, and there is no ownership information to link the site to a real-world person or business. This is ownership opacity, not an identity contradiction. Third-party broker databases have no record of the site. No regulated-entity status was found for it. Evidence:

• Registration: domain registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-08-21, expiring 2027-08-21; registrant details are incomplete or hidden.
• Hosting: served from AS13335 (Cloudflare, Inc., US), registry ARIN.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-17. This shows encryption only and says nothing about the operator's identity.
• Broker reputation database: no match for this site.

What to Verify Next

Do not engage with the site while the listings are active. Anyone who received a link to it should confirm independently whether the sender or campaign is real, using the official channels of any project it claims to represent, reached through a separately sourced route. A wallet used on the site, or any credentials entered, should be treated as potentially exposed. Revoking token approvals and rotating passwords is a sensible precaution. Monitor the listings and re-assess only if they are removed and an identifiable, verifiable operator emerges. Any licence claim should be checked directly against the relevant registry. Evidence:

• Reputation listings: the current blacklist and phishing designation are the principal reason for caution.
• Homepage: the interstitial shows the site's content is not reliably accessible for review.
• Domain history: a single-year, very recent history gives no earlier legitimate record to rely on.

Summary Verdict

The overall posture is high risk. Active blacklist and phishing listings, together with the domain's recent creation and the lack of any identifiable operator or independent verification, outweigh the technical hygiene signals. The site should be regarded as hostile until the listings are cleared and a verifiable operator is established.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host is not visible. Its transport encryption is valid, from a known issuer. These are baseline hygiene measures that are cheap to obtain and widely used by both legitimate and malicious sites, so they mitigate only marginally and cannot offset the reputation findings. The edge-only view prevents independent verification of where the content is hosted. The domain is also new, with a sparse subdomain footprint.

Closing Assessment

Avoid the site. Do not connect a wallet, sign transactions, enter credentials or make payments, and do not download anything from it. Report any link to it that arrived through a message, advert or social post.