Is okxclaimtoken-earnhodl-ver22.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page crypto "Hold & Earn" token rewards portal. It invites visitors to enter a public wallet address or connect a wallet to see an "estimated allocation" from a 10,000,000 $TOKEN reward pool. The page shows a live countdown and a running feed of recent allocations. It names no issuer or token contract and gives no verifiable reward mechanics. Its apparent purpose is to draw wallet holders into a "claim" flow under the appearance of an airdrop or token-marketing campaign.

Scam/Impersonation Risk

This assessment is clearly cautionary. The site is blacklisted: a major browser-safety service classifies it as social engineering, and multiple security engines, including a top-tier vendor, independently flag it as malicious. Together these external detections are decisive. Infrastructure protections and valid encryption do not offset them. No conflicting legal identities and no confirmed phishing-form behaviour were observed, but the content pattern matches a wallet-lure mechanic. The advertised pool is 10,000,000 $TOKEN, with 3,700,034.77 shown as already distributed and 6,299,965.23 remaining. A countdown of roughly four days adds urgency, and a "Live updates" feed shows individual awards of several hundred thousand tokens, each stamped "now". The feed is unverifiable and has the hallmarks of a fabricated social-proof device. The token is labelled only as a generic placeholder, and the page asks for a contract address that is never supplied. The checker presents a "read-only, no signature or transaction" assurance. It then moves from wallet connection to a "claim" step, and that step is described only in marketing copy. The "Allocation ready" screen also reports a zero estimated reward while labelling the wallet "Eligible", which undercuts the credibility of the calculation. The site's hostname pairs a well-known exchange brand with "claim token" and "earn" wording, though no affiliation with that brand is evidenced. Sandbox runs observed no wallet-drainer, clipboard-hijack or hidden-form behaviour. The wallet-connect flow itself was never exercised, so those results do not show that the claim step is safe. Evidence:

• Homepage: the reward pool is stated as 10,000,000 $TOKEN, with a live countdown and an allocation feed of "now"-stamped awards. No issuer or contract address is given.
• Homepage: a "read-only, no signature or transaction" assurance is followed by a wallet-connect and "claim" progression. Behavioural analysis recorded wallet-connect requests, claim-after-connect flow, countdown urgency and an unverified live feed.
• Domain registered about 15 days ago (~0.04 years old). The web archive holds only 2 snapshots, both from 2026, with first and last capture on 2026-10-04.
• Not recognized in DeFi protocol or TVL directories, so no independent record supports the token or campaign.

Regulatory Verification Notes

The page discloses no operator, company name, legal entity, jurisdiction, licence or registration, and no terms, privacy or contact pages were identified. For a service promising token distributions tied to wallet activity, this is a material disclosure gap. Ownership and governance opacity are both present. On the evidence supplied, the site's business model also reads as unverifiable in legal status, with the origin of the reward funding undisclosed. No third-party broker or regulatory-database entry matched the site, and the absence of a match is not itself a regulatory finding. The transport certificate is organisation-validated, but its subject is the hosting platform, not the site's operator, so it says nothing about who runs the campaign. Evidence:

• Homepage: no company, licence, registration number, address or contact details are published, and the marketing copy contains no legal or issuer disclosure.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject Netlify, Inc, valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN.

What to Verify Next

Any claim of an official campaign should be tested against the named exchange's own announcements. Those should be reached by typing its official address manually, not by following links from this site. The token's contract address should be confirmed independently through a reputable blockchain explorer, along with its issuer and the existence of any real distribution programme. The site's operator and its official support channels should be confirmed through an independent, offline route. If any wallet was already connected or a transaction approved, token approvals should be reviewed and revoked. Any assets or accounts linked to that wallet should be treated as potentially exposed. Evidence:

• Homepage: the contract field shows a placeholder and no real token address, so on-chain verification cannot start from the page itself.
• Homepage: the "claim" step is not documented, so the approvals it would request cannot be assessed in advance.
• Reputation checks: a browser-safety classification and multiple security-engine detections already exist against this site and can be re-confirmed independently.

Summary Verdict

The overall posture is high-risk. The site is externally flagged as malicious and shows the structure of a wallet-lure campaign. Its identity is unverified and its history is extremely short. Nothing in the evidence supports treating it as a legitimate token-rewards programme.

Infrastructure Integrity

The site is served entirely from edge addresses on a major cloud provider's network, behind a CDN/WAF layer, and the origin server was not observable. The hosting is mainstream, but that mitigates technical exposure only and does not establish legitimacy. Four abuse reports exist against one of the shared edge addresses. These apply to shared provider infrastructure and are not attributed to this site specifically. Short DNS lifetimes and ephemeral-looking resolution are consistent with a freshly deployed, easily replaced hosting setup.

Closing Assessment

The site should not be used for login, wallet connection, credential entry or any financial interaction. Seed phrases, private keys and signature approvals must never be supplied here. Passive viewing is the only reasonable engagement, and the site should be reported to the relevant platform and security channels.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.