Is tiffany-network.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Tiffany & Co. NFT Airdrop" claim landing page. It presents a "Genesis Collection" edition of 1,000 described as a free, exclusive, "legendary" Tiffany Blue Diamond NFT. Visitors are urged to connect a crypto wallet and submit their full name, email address and wallet address to "Claim NFT". Its apparent purpose is to harvest personal and wallet data, or to elicit wallet permissions, under the cover of a luxury-jewellery brand name. No product, price or named operator is disclosed.

Scam/Impersonation Risk

The evidence converges on a clearly elevated risk. A threat-intelligence reputation source has independently flagged the domain, which amounts to a confirmed blacklist signal. That signal matches what the homepage shows. The page borrows the name of a globally recognised luxury brand, but nothing on the site ties it to that brand: it names no issuing company, legal entity, contact channel, address or terms. Its "Verified Authenticity", "Lifetime Ownership", "Exclusive Benefits" and "Resale Rights" badges are unsupported assertions. The "247/1000 Claimed" counter is a static scarcity device that creates urgency, and nothing shows it reflects real claims. The airdrop combines a wallet-connect prompt with a form collecting identity and wallet details. That is the standard structure of wallet-drainer and data-harvesting scams. The business model is that the advertised NFT delivers no disclosed value, so the revenue likely comes from harvested contact data or malicious permission requests. Sandbox runs showed no wallet-drainer or clipboard-hijack behaviour, and no hidden forms or external data posts. That absence is not reassurance, because the page is a front end that could be redirected to such functions at any time. No conflicting legal identities were observed, since the site names no legal entity at all. Evidence:

• Homepage: a "Connect Wallet" prompt alongside a form requesting full name, email address and wallet address, with the instruction "Connect your wallet to continue".
• Homepage: a "247/1000 Claimed" counter and "Limited Availability" wording, with no verifiable claims mechanism.
• Domain registered 2026-09-24 (~0.07 years, about 24 days old), and the archive holds 1 snapshot, dated 2026 (1 year tracked). The domain therefore has no operating history.
• A reputation source has flagged the domain, and the page's own risk assessment is at the critical end of its range.

Regulatory Verification Notes

The site contains no legal notice, terms, privacy policy, licence reference, company registration or physical address. Because the page offers a collectible token and not a regulated financial service, no licence is claimed. The gap is that no accountable party stands behind a request for personal data and wallet access. The site gives no indication that Tiffany & Co. authorised, issued or endorsed the promotion. No third-party broker or regulatory-database entry was matched, so no external reputational or licensing context exists to offset the absence of on-page disclosure. The domain registrar is a commercial registrar, and the registrant details are incomplete. Evidence:

• Homepage: no operator name, contact details, address, terms or privacy statement appear anywhere in the captured content.
• Registration through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-09-24.
• Served from AS13335 (Cloudflare, US); TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-23.
• No broker or regulator database match exists for the domain.

What to Verify Next

Any claim of an official Tiffany & Co. NFT programme should be checked only through the brand's own channels, reached by typing its known address directly or using its verified social accounts. Links on this page should not be used. A genuine promotion would be announced on those channels and would not depend on this domain. Anyone who has already connected a wallet should review and revoke its token approvals with a reputable approval-management tool. They should also move assets to a fresh wallet if any permission was signed. Anyone who submitted a name and email address should expect targeted phishing and treat unsolicited messages accordingly. The domain can also be reported to the brand's protection team and to the registrar. Evidence:

• Homepage: the airdrop's only stated mechanics are wallet connection and a data form, with no named smart contract, chain or issuing entity to check independently.
• The domain was registered only weeks ago, so any claimed connection to the brand has no history to corroborate it.
• A reputation source has flagged the domain, which supports reporting it.

Summary Verdict

The evidence supports a high-risk posture. A young, anonymous domain, a luxury-brand lure, a data and wallet harvesting mechanism and a confirmed external blacklist signal point the same way. Valid transport encryption and an absence of overt browser-side exploitation do not outweigh this. The site is assessed as a probable brand-impersonation and wallet-harvesting airdrop and not as a legitimate brand activation.

Infrastructure Integrity

The domain resolves entirely to Cloudflare edge servers in the US, with a valid but low-assurance certificate. Cloudflare's protection is a mild mitigating factor only. It hides the origin server, so the real hosting location cannot be independently verified. It also lets content be swapped quickly without a visible infrastructure change. Reputable infrastructure does not offset the reputational and content-level risk here.

Closing Assessment

The site should not be used for any interaction beyond viewing. Wallets should not be connected, no personal details should be entered, and no signature or transaction should be approved. Anyone who has interacted should act promptly on the revocation and monitoring steps above.