Is rewards-availproject.info a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at rewards-availproject.info presents a single landing page titled "FastBridge by Avail | Unified Cross-Chain Swaps and Transfers". It markets itself as a cross-chain swap and token-transfer service tied to the Avail ecosystem. The page text is very short, and the site's apparent purpose is to draw visitors into a bridge or rewards-style interaction under the Avail name. The domain is rewards-themed and carries no stated operator, product documentation or company details.

Scam/Impersonation Risk

Contradictory signals are present and weigh heavily. Several independent security engines, including three tier-one vendors, currently flag the domain as malicious, and this amounts to a confirmed blacklist listing. That listing is decisive and outweighs the site's otherwise tidy technical presentation. The domain brands itself as an Avail "rewards" destination and the page presents a "FastBridge by Avail" product. Rewards-themed naming that borrows an established project's name is a pattern commonly seen in claim and airdrop lures, so a visitor could easily assume an official affiliation. No evidence connects the site to the real project, and no conflicting legal entities or confirmed brand-impersonation finding was recorded. The danger comes from the combination of a threat-intelligence listing, a very recently created domain and a cross-chain transfer pitch, which would involve moving funds or connecting wallets. The automated browser sessions saw no external network calls, wallet-connection prompts, clipboard tampering or content cloaking. That clean behavior reflects a near-empty page and does not offset the reputation findings, because a harmful flow can be activated later without visible change. Evidence:

• Domain registered 2026-08-07 (~0.22 years, about 11 weeks old), so the site has almost no operating history.
• Web archive holds 1 snapshot, dated 2026-08-09, with 1 year tracked. This is a thin record for a service that claims an established ecosystem brand.
• Homepage, scanned externally: 17 engines rated it malicious and 2 suspicious, including three tier-one vendors.
• Homepage, behavioral sandbox: 3 of 3 runs completed with zero external requests and no wallet-drainer or cloaking activity.

Regulatory Verification Notes

The captured page exposes no legal-entity name, licensing statement, terms of service or governance information, and the page's body text is only a few hundred characters. A service that offers asset swaps and cross-chain transfers would normally disclose its operator and compliance position. The evidence shows ownership opacity, and the operator's identity could not be independently connected to Avail or to any registered business. The absence of licensing detail is a transparency gap. Taken alone it would not prove wrongdoing, but here it sits alongside confirmed threat listings. No third-party broker or regulator record corresponds to this site. Evidence:

• Registered through NICENIC International Group Co., Limited, with registration running to 2027-08-07.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-03. Domain-validated encryption confirms only control of the domain and says nothing about who operates it.
• Homepage: no company name, license number or registration reference is stated.

What to Verify Next

Any link to this site should be treated as untrusted until the Avail project's real channels confirm it. The official bridge address and any rewards program should be checked through the project's own documentation and verified social accounts, reached by typing the address manually and not by following this link. Users who already visited should avoid connecting a wallet or signing transactions. If a wallet was connected, they should review and revoke token approvals and consider moving assets to a fresh wallet. Organizations should block the domain at the DNS or proxy layer pending clearance. Evidence:

• Homepage title claims "FastBridge by Avail", an affiliation that no independent evidence supports.
• The domain does not match a DeFi protocol listing, so no ecosystem directory recognizes it as a known service.
• Homepage text is very brief, with no documentation, contract references or support channels to validate.

Summary Verdict

The assessment is a high-risk, critical-trust posture. A confirmed threat-intelligence listing, a brand-borrowing name and the lack of any verifiable operator together outweigh the technically correct transport security and clean sandbox behavior. The site's legitimacy cannot be established and the evidence points toward misuse, though the real-world operator remains unidentified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node, so the origin server was not observable. This protective layer is a mitigating factor only, because it indicates a mainstream hosting choice and does not vouch for the content or the operator. Edge-only visibility also prevents independent hosting verification and can conceal rapid content swaps behind the same address. It therefore cannot offset the reputation findings above.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial transaction. At most it should be viewed passively, ideally from an isolated environment. Anyone who received a link to it should report it to the Avail project and to the registrar or hosting provider's abuse channel.