Is memecoin-drop.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional landing site on the memecoin-drop.live domain. The captured homepage is titled as a Solana token distribution and "$TOKEN Airdrop", which suggests a token-giveaway or claim funnel. It presents itself as a way to receive a free cryptocurrency allocation. The apparent business model is airdrop-style token promotion. The captured page text is short, and the operator's identity is not independently established.

Scam/Impersonation Risk

This is the dominant concern. The domain is blacklisted by external threat-intelligence sources. Multiple independent detection engines currently classify it as malicious, including two tier-one security vendors. A prior phishing association is also recorded against it. Together these amount to confirmed contradictory signals and an elevated risk of scam or credential and asset-theft activity. The airdrop framing fits a pattern widely used to lure visitors into connecting wallets or surrendering seed phrases. No conflicting legal entity names were observed, and no specific brand impersonation was identified, so the risk rests on the reputation findings and the domain's profile, not on identity inconsistency. The behavioral sandbox did not observe wallet-connection attempts, clipboard manipulation, hidden forms, credential posts to external hosts or content cloaking. That is a limited mitigating observation and does not offset the external detections, because a malicious payload can be activated later or served selectively. The domain's extreme newness and thin history add to the concern. Evidence:

• Homepage: titled as a Solana token distribution and "$TOKEN Airdrop", a giveaway lure format.
• Domain registration: created 2026-09-07 (about 0.12 years, roughly 45 days old) and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web archive: 2 snapshots in total, between 2026-09-17 and 2026-09-22, which means no meaningful history.
• Sandbox: 3 of 3 runs completed with no external form posts and no wallet or clipboard abuse, but the reputation detections remain decisive.

Regulatory Verification Notes

The captured homepage does not state a licensed financial entity, a registration number, a named operator or any regulator. The registrant's identity is also not independently established. No third-party broker or regulatory registry match exists for this domain. This is a disclosure and verification gap and is not itself proof of wrongdoing. Here it compounds the reputation findings, because a site that invites token claims should be able to identify who operates it. The site offers no assurance of regulatory oversight or consumer protection. Any token distribution it promotes should be treated as unregulated and unaccountable. Evidence:

• Homepage: no named operator, legal entity, license or registration identifier appears in the captured content.
• Hosting and transport: served from AS13335, and the TLS certificate is domain-validated (DV), issued by WE1 and valid to 2026-12-06. This confirms encryption only and says nothing about the operator.
• Third-party registry: no broker or regulator listing matched the domain.

What to Verify Next

Any project that claims to be running this airdrop should be confirmed through its own official channels, reached independently of this site. Those channels include its verified social accounts, its documented website and its published token contract. The distribution should be checked against what the project itself announces. The operator should be identified through an official registry or a recognized business-registration source, and any regulatory status should be confirmed there. The official support and contact channels should be confirmed through an independent route. Wallet connection, signing requests and seed-phrase entry must not be attempted on this site while the checks are outstanding. Evidence:

• Homepage: the airdrop claim cannot be traced to any named project or token issuer in the captured content.
• Domain profile: the domain is only weeks old, so no long-standing operator history exists to rely on.
• Reputation: active malicious detections mean any verification should be done outside this site.

Summary Verdict

The available evidence places this website in a critical, high-risk posture. Active, corroborated threat detections and a very recent domain with no meaningful history converge on that conclusion. The operator's identity is unverified, and the site carries the profile of a token-lure page. Technical hygiene such as valid encryption and the absence of overt malicious behavior in the sandbox does not alter this conclusion.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers. The origin server is not observable. This offers some mitigation for exposure and shows that the infrastructure is mainstream. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes. The infrastructure cannot offset the reputation risk, and it does not establish legitimacy.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Visitors should not sign in, connect a wallet, approve transactions, enter credentials or make any payment on it. Viewing the page in a read-only manner, from an isolated environment, is the most that is advisable. If a wallet was already connected or any credentials were entered, wallet permissions should be revoked and the affected passwords changed immediately.