Is app-grassfoundation.com a scam?

Our automated security review flags app-grassfoundation.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is app-grassfoundation.com safe to use?

No — app-grassfoundation.com scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does app-grassfoundation.com have a valid SSL certificate?

Yes. app-grassfoundation.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the app-grassfoundation.com domain?

app-grassfoundation.com is 3 days old, registered on 6/12/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has app-grassfoundation.com been flagged by antivirus engines?

3 out of 92 antivirus engines in our malware network flagged app-grassfoundation.com as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.

Is app-grassfoundation.com on any phishing or malware blacklists?

No. app-grassfoundation.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is app-grassfoundation.com hosted?

app-grassfoundation.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the app-grassfoundation.com report updated?

This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around app-grassfoundation.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is app-grassfoundation.com legit or a scam?

Our verdict:Dangerous· 1/100

SafeSuspiciousDangerous

Fake Grass Foundation airdrop site — 3-day-old domain flagged as phishing by multiple antivirus engines.

Top reasons

Domain registered only 3 days ago — typical of short-lived phishing and airdrop-drainer campaigns.Forcepoint ThreatSeeker and SOCRadar classify it as phishing, indicating credential or wallet-harvesting intent.No contact email, phone number, or postal address — fraudulent sites routinely omit verifiable operator information.

app-grassfoundation.comScanned 6h ago

Post Facebook

Trust score

DANGEROUS

Heuristics 0·MT 40

Category tags

airdrop drainercrypto fraud#Airdrop Drainer#Crypto Fraud72% MT confidence

Technical red flags (2)

3 of 92 engines flagged Domain is 3 days old

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

3/92

Engines flagged this URL

Domain Age

3 days old

Registered Jun 12, 2026

MT Intelligence

Suspicious

High likelihood · 72% confidence

DANGEROUS

Crypto scam / wallet-drainer

Domain was registered only 3 days ago — brand-new sites are higher-risk by default. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Website Preview

LIVE RENDER

app-grassfoundation.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The domain app-grassfoundation.com was registered only 3 days ago and mimics the legitimate Grass Foundation airdrop program. Forcepoint ThreatSeeker and SOCRadar both classify it as phishing, a strong indicator of credential or wallet-harvesting intent. The page offers no contact email, phone, postal address, or operator information — standard red flags for a fraudulent operation. The site loads external resources from legitimate-looking Grass domains (grass-foundation.gitbook.io, getgrass.io, grassfoundation.io), a common tactic to appear credible while harvesting user data. The combination of extreme youth, phishing-engine detections, and complete absence of verifiable business identity points to an airdrop-drainer clone.

Full dossier

Analysis complete

Page Content

The page presents itself as 'Grass Foundation Season 2 Airdrop' and invites users to vote on reward distribution dates, promising bonus allocations. The body text references voting on Solana and EVM chains, mimicking the legitimate Grass airdrop mechanics. No login form or countdown timer is present, but the voting call-to-action likely directs users to a wallet-connection or credential-entry flow hosted elsewhere.

Infrastructure

Hosted on IP 104.21.53.234 with clean abuse reputation (0/100 score, no reports). SSL certificate is valid and issued by Google Trust Services, expiring in 86 days. The domain uses privacy-protected WHOIS registration through NICENIC INTERNATIONAL GROUP CO., LIMITED.

Domain History

Registered only 3 days ago, making it a brand-new domain. This extreme youth, combined with the phishing classification, is consistent with disposable fraud infrastructure. The domain is not indexed in global traffic rankings.

Web Reputation

Forcepoint ThreatSeeker and SOCRadar both flag the domain as phishing. Fortinet flags it as spam. Browser blocklists remain clean, likely because the domain is too new to have been widely reported. No independent trust aggregators have rated it.

Risk Factors

Domain registered only 3 days ago — typical of short-lived phishing and airdrop-drainer campaigns.
Forcepoint ThreatSeeker and SOCRadar classify it as phishing, indicating credential or wallet-harvesting intent.
No contact email, phone number, or postal address — fraudulent sites routinely omit verifiable operator information.
Impersonates the legitimate Grass Foundation airdrop program, a high-value target for clone-site attacks.
Loads external resources from domains resembling the real Grass Foundation (grass-foundation.gitbook.io, getgrass.io), a social-engineering tactic.
Not indexed in global traffic rankings and absent from independent trust aggregators — consistent with a newly deployed scam.
Fortinet flags it as spam, adding to the multi-engine consensus of malicious intent.

Positive Signals

SSL certificate is valid and issued by a trusted CA (Google Trust Services).
Hosting IP has clean abuse reputation with no reported incidents.
No malware or exploit-kit signatures detected by our antivirus network.

AI Recommendation

Do not interact with this site. If you intended to participate in the legitimate Grass Foundation airdrop, visit the official Grass website directly (verify the URL independently) and never enter wallet credentials or personal information on newly registered domains. Report this phishing domain to the real Grass Foundation and to your browser's abuse-reporting channel.

Scam network detected

3 linked domains correlated

The site loads resources from multiple Grass-branded domains, likely part of a coordinated clone-site operation designed to appear legitimate while harvesting wallet credentials or personal data from airdrop participants.

grass-foundation.gitbook.iogetgrass.iograssfoundation.io

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for app-grassfoundation.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age

3 days

Registered Jun 2026

Web mentions

No scam reports found

No complaints, no negative coverage turned up in our sweep.

Research summary

Narrative write-up from our AI analyst

No independent scam reports or trust mentions found in available sources.

Antivirus Engines

Detection matrix · live

3 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

2Malicious1Suspicious55Harmless92Engines

of 92

Forcepoint ThreatSeeker

Malicious· phishing

SOCRadar

Malicious· phishing

Fortinet

Suspicious· spam

3 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Domain History

Age3 days old

RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED

RegisteredJun 12, 2026

ExpiresJun 12, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 10, 2026 (86d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://app-grassfoundation.com/
2200https://app-grassfoundation.com/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Scam-Type Likelihood

1 of 13 categories showed signals

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

Do not interact with app-grassfoundation.com
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
Report the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

grass-foundation.gitbook.io getgrass.io grassfoundation.io static.cloudflareinsights.com

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags app-grassfoundation.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — app-grassfoundation.com scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. app-grassfoundation.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 86 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
app-grassfoundation.com is 3 days old, registered on 6/12/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
3 out of 92 antivirus engines in our malware network flagged app-grassfoundation.com as malicious or suspicious (2 outright malicious). Even one detection is a meaningful signal.
No. app-grassfoundation.com is not currently listed on the major browser blocklist feeds that modern browsers use.
app-grassfoundation.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 15, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around app-grassfoundation.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·app-grassfoundation.com

DANGEROUS

A newly registered domain (3 days old) impersonating the Grass Foundation airdrop program. Two antivirus engines flag it as phishing, and the site lacks any legitimate business contact information or verifiable operator details.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

site-4hencvzd9.godaddysites.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.