{"root_cid":"bafybeiaggli4jh4jq4r3gqes2mpnam3lcrxivxpui76yc2o5vrejhkwkoq","model":"openai/gpt-5.4-mini","analyzed_at":"2026-05-06T04:17:20.903Z","result":{"schema_version":1,"category":"Finance","category_confidence":0.97,"summary":"A Webflow-styled Ethereum airdrop and refund funnel that imitates support flows and prompts users to import a wallet recovery phrase.","signals":["analysis-context.latest_probe.title='Ethereum Events' and latest_probe.ipfs_path points to index.html","index.html: 'Welcome to Ethereum Events' plus CTAs for 'Mysterybox bonus', 'Refund All Gas Fees', and 'How can i claim my Airdrop ?'","how-to-claim-airdrop.html: 'connecting your wallet using a 12-word phrase'","wallet.js: 'Enter the Secret Recovery Phrase' and POSTs the entered text to 'https://api.emailjs.com/api/v1.0/email/send'","gas-fees-refund.html: 'Refund All Gas Fees' and loads './wallet.js'","help-support.html: 'There is no official Ethereum support' and repeats wallet-support guidance"],"quality":{"tier":"low","score":0.18,"is_substantive":true,"is_redirect_only":false,"is_placeholder":false,"rationale":"The site is a multi-page static marketing funnel with custom styling and scripted popups, but the content is thin, repetitive, and centered on a dubious airdrop/refund flow."},"security":{"risk":"critical","risk_score":0.99,"threat_type":"seed_phrase_prompt","safe_to_list":false,"findings":[{"type":"seed_phrase_prompt","severity":"critical","confidence":0.99,"evidence":"wallet.js: 'To connect your wallet <br/> Enter the Secret Recovery Phrase' and 'Because of many requests, our Connect Wallet system is currently busy... connecting your wallet using a 12-word recovery phrase.'","file":"wallet.js"}]},"files_reviewed":["analysis-context.json","index.html","help-support.html","how-to-claim-airdrop.html","gas-fees-refund.html","mysterybox.html","wallet.js","wallet.css"]}}