---
title: "Is airdrop-250.pages.dev a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "airdrop-250.pages.dev"
verdict: "Critical Risk"
title: "Is Pages a scam? airdrop-250.pages.dev trust score 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/airdrop-250.pages.dev
assessed: 2026-11-01
---

# Is Pages a scam? TrustSniffer's high-risk assessment of airdrop-250.pages.dev: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** airdrop-250.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-11-01 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 10 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Listed as unsafe (Google) | Risk |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 5 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (2 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the airdrop-250.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/airdrop-250.pages.dev/screenshots/first.png)

_What airdrop-250.pages.dev served when TrustSniffer captured it on 2026-11-01. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a free, shared web-hosting platform, with a name built around an "airdrop" theme. The name suggests a cryptocurrency or token giveaway. When analysed, the page returned only a short interstitial. That page carried a phishing warning from the hosting provider's protection layer instead of any identifiable business content. It presents no visible brand, product or operator, so its apparent purpose is to attract visitors with a giveaway lure, a pattern commonly used to harvest wallet access or credentials.


### Scam/Impersonation Risk

This site carries a **confirmed adverse reputation**. Multiple independent threat-intelligence sources currently flag it. One is a major browser safe-browsing service, which classifies it under its social-engineering category, the category used for phishing and deceptive-lure pages. Several well-known security vendors also flag it as malicious, and the combined detections place it on a **blacklist**. The edge protection layer's own warning interstitial, shown in place of the page content, is consistent with these listings. The hostname adds to the concern. It sits on a widely used free hosting domain and pairs a promotional "airdrop" keyword with a numeric suffix, a structure that is cheap to create in bulk and easy to discard and re-register. The site's behaviour under interaction was heavy on third-party calls, with a large volume of background requests to external destinations, a large DOM change after interaction and a notable number of console errors. All of those external destinations were recognised, mainstream services. This reduces the likelihood of covert data exfiltration but does not offset the reputational findings. No wallet-connection prompts, clipboard tampering, hidden forms or credential posts to external hosts were observed in the sandbox runs. No conflicting legal identities and no specific brand impersonation were identified. The risk therefore rests on the confirmed threat listings and the lure-style hostname, not on a proven impersonation of a named entity. Evidence:

- Homepage: the page returned a restricted-access response containing a phishing-warning interstitial from the hosting provider's protection layer, titled as a suspected phishing page.
- Reputation: the browser safe-browsing service flags the domain for social engineering, and ten security vendors rate it malicious, with one more rating it suspicious. Three of these are tier-one vendors: Fortinet, Google and Sophos.
- Domain provenance: the domain is about 0.38 years (~138 days) old. Its web-archive record is thin, with 2 snapshots between 2026-06-16 and 2026-07-04, covering 1 year tracked.
- Behaviour: 86 external background requests and 5 external POSTs were recorded across 3 sandbox runs, with 16 console errors and a peak of 1,508 DOM mutations after interaction.

### Regulatory Verification Notes

No licensing, registration or legal-entity information could be assessed. The reviewable content consisted of a protection interstitial and not an about, terms or contact page. The real-world operator therefore cannot be independently connected to any person or organisation, and no regulated status is indicated. No third-party broker or regulatory-database match was found. This lack of a regulatory footprint is a verification matter and is secondary to the reputational findings above. A site that invites token claims would normally be expected to identify its operator and any relevant authorisation, and none is evident. Evidence:

- Legal and identity pages: no terms, privacy, about or licensing content was available in the reviewed material.
- Broker and regulatory reputation databases: no match was recorded for this domain.
- Hosting: the site is served from AS13335 (Cloudflare, Inc., US) and not from infrastructure attributable to a specific operator.
- Transport security: the TLS certificate was issued by WE1 as domain-validated (DV), valid to 2027-01-01. This confirms only encrypted transport and says nothing about who operates the site.

### What to Verify Next

Anyone who reached this site through a message, advertisement or social post should treat the original source as the object of verification. The sender or account that supplied the link should be checked through an independent channel. Any claimed project or token should be confirmed against its official website, as published by an established, independently reachable source. A project that really distributes tokens should be reachable at its own domain and not only at a throwaway hosting subdomain. If wallet access or credentials were already entered on this site, the wallet should be treated as exposed. Token approvals should be reviewed and revoked, funds moved to a fresh wallet, and passwords changed where reused. Official support or contact channels for any referenced project should also be confirmed independently. Evidence:

- Homepage: the page offers no verifiable operator, project or token name that could be checked against an official source.
- Hostname: the shared-platform subdomain with a promotional keyword gives no independent route to confirm the sender's identity.
- Reputation listings: the active threat detections mean any prior interaction should be handled as potentially compromising.

### Summary Verdict

The overall posture is **high risk**. Active, converging threat detections from several independent sources outweigh the technically sound elements of the site: encrypted transport, a recognised certificate issuer and consistent hosting. The operator's identity is not independently established, and the site's age and archive history are too thin to offset the adverse reputation. Its classification therefore stays firmly in the cautionary range.


### Infrastructure Integrity

The site is fronted by a major CDN and web application firewall (Cloudflare), and all four observed addresses are edge nodes of that network. The origin server was not observable, so hosting cannot be independently attributed to a specific operator. Edge-only visibility also makes it harder to detect rapid content changes behind the front end. This is a mitigating factor for availability and baseline hygiene only. Using a reputable CDN neither demonstrates legitimacy nor offsets the confirmed threat detections. The CDN's own bot-challenge and phishing-warning behaviour is consistent with those detections.


### Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction. Anyone who has already interacted with it should follow the remediation steps above. Viewing the page without entering any data is the only low-exposure use, and it is best avoided. The link should be reported to the platform or channel where it was found.


_Written analysis generated 2026-11-01 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, history in the web archive, behaviour in a sandbox, hosting and network, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)

### 04 Hosting and network
- The domain was registered between three and six months ago. (Hosting and network `rule:DNS_YOUNG_6M`)

### 05 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of airdrop-250.pages.dev.

- The request stayed on airdrop-250.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2026-06-16. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f1a |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-01 |
| Domain age | 0.38 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-06-16 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 10 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 1 match |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about airdrop-250.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [solvprotocolverification.pages.dev](https://trustsniffer.com/report/solvprotocolverification.pages.dev), a similar name (Critical Risk, 5/100)
- [wqerweq.pages.dev](https://trustsniffer.com/report/wqerweq.pages.dev), a similar name (Critical Risk, 0/100)
- [flockerztokenclaim.pages.dev](https://trustsniffer.com/report/flockerztokenclaim.pages.dev), a similar name (Critical Risk, 5/100)
- [api-polkastarter.pages.dev](https://trustsniffer.com/report/api-polkastarter.pages.dev), a similar name (Critical Risk, 5/100)
- [voting-mefai-net.pages.dev](https://trustsniffer.com/report/voting-mefai-net.pages.dev), a similar name (Critical Risk, 21/100)
- [solspin-8dn.pages.dev](https://trustsniffer.com/report/solspin-8dn.pages.dev), a similar name (Critical Risk, 0/100)
- [sale-creator-bid.pages.dev](https://trustsniffer.com/report/sale-creator-bid.pages.dev), a similar name (Critical Risk, 22/100)
- [unich-quests-net.pages.dev](https://trustsniffer.com/report/unich-quests-net.pages.dev), a similar name (Critical Risk, 0/100)
- [plpsupport.com](https://trustsniffer.com/report/plpsupport.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [amministrazioni-torino.com](https://trustsniffer.com/report/amministrazioni-torino.com), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/airdrop-250.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/airdrop-250.pages.dev · assessed 2026-11-01.*