Is mrmigglesbase-appclaim.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional landing site for a community memecoin called $MIGGLES on the Base blockchain. It is themed around a cat mascot, "Mister Miggles," and describes itself as a fan community project. It presents a token contract address, a "how to buy" walkthrough, a companion NFT collection and an airdrop-claim button. Its apparent purpose is to steer visitors into acquiring the token and NFTs through decentralized exchanges and wallet connections. The page describes no revenue model beyond a claim that part of the proceeds goes to feline charities.

Scam/Impersonation Risk

Contradictory signals are present and decisive. A major browser-safety service classifies the site under its social-engineering category, and several independent reputation engines flag it as malicious. Together these amount to a confirmed blacklist condition, and protective hosting does not offset it. The page content is consistent with that concern. The "Claim Airdrop" button, shown in the page header and elsewhere, contradicts the site's own story, which states the token had "no pre-sale, no KOLs, and no airdrops." Airdrop-claim prompts are a common lure for wallet-connection and approval abuse. The page presents "Liquidity: BURNED," "Ownership: RENOUNCED" and "0% taxes" as fact, but links no audit, lock record or on-chain proof. The team is anonymous, and an "Our Partner" entry cannot be verified. The page leans heavily on Coinbase and Base branding, including the tagline "The Coinbase Cat Mascot." A small disclaimer says the project is not affiliated with Coinbase or Base, which only partly offsets this. The hostname is also a free-hosting subdomain whose label combines the mascot name, the chain name and the word "appclaim," and it closely resembles that hosting platform's name. This is a typical pattern for disposable claim pages. No conflicting legal entities were observed, and no credential form was detected. However, the external reputation findings, the contradictory airdrop messaging and the unproven safety claims point to elevated risk for any wallet interaction. Evidence:

• Homepage: the "Claim Airdrop" call-to-action appears alongside the statement that no airdrops occurred.
• Homepage tokenomics block: burned liquidity, renounced ownership and 0% tax are asserted for a 1B-supply token without any audit or lock link.
• Homepage: the "Coinbase Cat Mascot" branding is paired with a non-affiliation disclaimer, and an unverifiable "Our Partner" entry appears.
• Domain provenance: the domain is about 2.2 years old, and the web archive holds 5 snapshots between 2024-08-22 and 2024-12-15 (1 year tracked).

Regulatory Verification Notes

The site is not a regulated financial service and claims no licence, registration number or supervisory authority. It names no operating company, and no identifiable operator appears anywhere on the page. The legal status of the token, the NFT collection and the charity pledge is therefore unverifiable from the site alone. The page claims that a portion of token and NFT proceeds goes to feline charities. It names no recipient and gives no accounting, so the claim has no documentary support. No third-party broker or regulator listing was found for this site. The reputational concerns above come from threat-detection sources, not from any licensing or regulatory finding. The site's identity could not be independently connected to a real-world brand or person. Evidence:

• Homepage: the site shows no company name, licence, registration number or legal-entity disclosure, and the team is anonymous.
• Homepage FAQ and story: the charity-donation claim names no recipient and gives no accounting.
• Transport and hosting: the TLS certificate is issued by WE1 (DV, domain validation only), valid to 2026-12-21, and the site is served from AS13335 (Cloudflare, Inc., US). A DV certificate confirms control of the domain, not the identity of its operator.

What to Verify Next

Any engagement should begin with independent confirmation that the token contract address matches the one published through official, separately sourced project and exchange channels. The airdrop claim needs the same independent check: whether any such campaign exists, and whether it is announced somewhere other than this page. The "burned liquidity" and "renounced ownership" statements should be checked directly against on-chain records and any third-party contract audit. The charity pledge should be confirmed with the named beneficiaries, if any are identified. The "Our Partner" entry, and any claimed link to Coinbase or Base, should be confirmed with those organizations through their own official channels. The community's Telegram and X links should be reached through a route independent of this page, and the project's support channels confirmed the same way. Evidence:

• Homepage: the contract address is published as plain text with a "Copy" control and no verification link.
• Homepage: the "How to buy" steps direct visitors to a wallet download and a decentralized-exchange swap.
• Homepage: the only community channels offered are Telegram and X, with no contact page or mailing address.

Summary Verdict

The assessment is critically low trust with elevated risk. Confirmed adverse external detections and contradictory on-page messaging outweigh the otherwise stable technical presentation. The site's real-world operator remains unverified. Valid encryption and consistent, successful page loads do not offset the reputational findings, and the site must be treated as a likely vehicle for social-engineering abuse.

Infrastructure Integrity

The site sits behind a mainstream CDN and web application firewall, and all observed addresses are edge servers. The origin server was not observable, so the real hosting location cannot be independently confirmed. This is a mitigating factor for availability and basic transport hygiene only, and it says nothing about the legitimacy of the content. Edge-only visibility also means page content could be swapped quickly without a change in network footprint.

Closing Assessment

At most, the site should be viewed read-only. No wallet should be connected, no transaction or token approval signed, no airdrop claimed, and no credentials or funds submitted through it. Anyone who has already interacted with it should review and revoke wallet approvals and move assets to a fresh wallet.