Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
airdrop-cyberkongz.pages.dev is low-trust and potentially risky.
| What this site appears to be | CyberKongz is an NFT and Web3 project landing page covering its NFT collections, the Genkai mint, the Play & Kollect gamified minting experience, the $BANANA token, a marketplace, and Ronin validator news. It shows recent sales and community links. The extracted text contains no login form, impersonation or fund-harvesting signals, but mint contract details and audit references are not visible. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2.6 years oldRegistered history | Clear |
| Web archive | Archived since 202416 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Governance Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is a single-page landing site presenting the CyberKongz NFT and Web3 project. It promotes the Genesis, Baby, VX and Genkai collections, the "Play & Kollect" gamified minting experience, the $BANANA token and the KongzMart whitelist marketplace. It also offers asset bridging, a "Guardian" security contract, a "Klaw" golden-ticket redemption, an ENS tool and Ronin validator news. Its apparent purpose is to drive visitors to connect a crypto wallet, check eligibility and take part in NFT mints. Revenue appears to come from primary mint sales and secondary-market activity around the collections and the token ecosystem.
Scam/Impersonation Risk
No contradictory signals were observed. The analysis found no confirmed phishing, no conflicting legal identities, and no third-party warning or listing that names this site. The homepage has no login form, hidden forms or credential-capture mechanics, and the sandbox observed no clipboard manipulation or wallet-draining behaviour. Reputation screening produced one "suspicious" flag from a single engine. It is unconfirmed, no other engine corroborated it, and it was not matched by any malicious detection. It is therefore treated as a soft reputational note, not a finding, and it is disclosed here rather than set aside. Two features of this site call for caution without amounting to a contradiction. First, the address is a keyword-style name ("airdrop" plus the project name) on a shared developer hosting subdomain, not a standalone project domain. Automated brand-lookalike matching flagged it. That flag is a similarity indicator only: no impersonation was confirmed, but nothing on the page shows that this is the project's official presence either. Second, the commercial model is deposit-before-service. The Genkai and Play & Kollect mints and the KongzMart marketplace require the visitor to connect a wallet and pay in cryptocurrency before any asset is delivered, and this alone drives the cautious assessment. The page also shows recent sales (for example, individual Kongz "adopted" for 0.255 ETH and 1.14 ETH). It makes community claims such as about 249.8K Twitter followers, 4,716 Discord users online and 6,369,864 adventure runs. These figures are presented as unverified on-page counters with no independent source. The site promises no fixed yield or return, which keeps it out of the higher-risk yield-scheme category. Evidence:
- Homepage: the extracted content shows no login form, hidden form or password field, and the page's own analysis finds no impersonation or fund-harvesting indicators.
- Homepage: "Connect Wallet", "Check Eligibility", Genkai, Play & Kollect and KongzMart entries all lead into paid on-chain interactions, which establishes the deposit-before-service structure.
- Domain provenance: the domain is about 2.6 years old, and its address sits on a shared hosting platform subdomain, not a dedicated project domain.
- Reputation screening: 0 malicious and 1 suspicious detection (unconfirmed, single engine), with the remainder harmless or undetected.
Regulatory Verification Notes
The homepage names no operating legal entity and claims no licence or registration. It offers a Terms and Conditions link as its only formal disclosure, and the extracted text shows no jurisdiction, company registration or contact of record. No mint contract addresses, audit references or mint terms are visible, so the on-chain purchase flow could not be verified from the page. Identity verification status is unverified (score 30, confidence 0.5), so the real-world operator remains unconfirmed. The site's branding and community statistics are consistent with the CyberKongz project but cannot be treated as proof of identity or of an official presence. Because the activity is NFT sales and token promotion, not a regulated financial service, the lack of a licence is a verification point, not evidence of wrongdoing. No third-party broker or regulator record matched this site. Evidence:
- Homepage: no company name, licence, registration number or audit reference appears in the extracted content, and only a Terms and Conditions link is provided.
- Archive history: 16 snapshots spanning 2024–2025 (2 years tracked), with continuous coverage and no abrupt change of purpose.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-11-25 (35 days remaining).
What to Verify Next
The first step is to confirm that this address is linked from the CyberKongz project's established official channels, such as its verified social accounts or its main website, rather than reached through an ad, message or airdrop link. Before connecting a wallet or approving any transaction, the mint and marketplace contract addresses should be checked on a public block explorer and matched against addresses the project publishes through those channels. Any advertised airdrop or eligibility claim should be confirmed the same way, and the full Terms and Conditions should be read for refund, delivery and liability provisions. Official support or contact channels should be established independently, not taken from this page. Evidence:
- Homepage: Genkai mint, Play & Kollect and "Check Eligibility" entries carry no visible contract references to compare against.
- Homepage: the page shows no social links or contact details to cross-check, so the official presence has to be established externally.
- Terms and Conditions link: it is the only formal policy reference, and its contents were not part of the extracted page text.
Summary Verdict
The site is a content-rich, behaviourally clean NFT project page with a stable history, but its real-world operator is not independently verified. Its payment-first model and shared-subdomain presentation hold the overall posture at low trust under a precautionary, unconfirmed-identity reading. The assessment rests on commercial structure and unverified provenance, not on any confirmed malicious activity.
Infrastructure Integrity
The site is served entirely through Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. This is a reputable, well-established network. The site's transport encryption is valid, with a recognised issuer. The origin server was not observable, so hosting could not be independently verified beyond the edge. Protective infrastructure is a mitigating factor only and does not establish who operates the site or that it is genuine.
Closing Assessment
Wallet connections, mint payments and any approval of token transactions should wait until the site's link to the official CyberKongz channels and the relevant contract addresses has been independently confirmed. Browsing the page for information carries little exposure on its own.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by page content, behaviour in a sandbox.
01 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META - The page carries none of the structured previews for search and social sharing that established sites usually provide.Page content
rule:PAGE_SEO_NO_STRUCTURED
02 Behaviour in a sandbox
- The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of airdrop-cyberkongz.pages.dev.
- The request stayed on airdrop-cyberkongz.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2024-03-25. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f19 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-25 |
| Domain age | 2.57 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-03-25 |
| Archive snapshots | 16 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about airdrop-cyberkongz.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.