Is faucetdapps.pages.dev a scam? TrustSniffer's high-risk assessment: 17/100

Overview

This site is a single-page web application served from a free subdomain on a public static-hosting platform, titled "BLOCKCHAIN - Secure Multi-Chain Wallet Resolution Protocol" and branded around "faucet dapps". It presents itself as a blockchain utility, a multi-chain wallet resolution protocol, in the faucet and decentralized-application category. The homepage carries a modest amount of text and a large number of interactive elements, and its apparent purpose is to draw visitors into wallet-related or form-driven interactions. The page content does not establish a named operator or a concrete business model.

Scam/Impersonation Risk

Contradictory signals are present, and they drive the cautionary posture of this report. The domain is currently blacklisted: more than one independent reputation source flags it. Multiple security engines classify it as malicious, and a further engine marks it suspicious. This is a confirmed adverse reputation finding, not a soft warning. No conflicting legal identities, brand impersonation, or phishing page were confirmed in the content analysis. The site's naming and title do, however, pair generic blockchain and "wallet resolution" language with a free hosting subdomain, a pattern common among disposable crypto lure pages. The homepage contained six forms that post to external destinations. Interaction produced very large DOM rewrites, with thousands of mutations after interaction, and nine browser console errors. Together these show a heavily script-driven page whose visible content changes sharply once a visitor engages, and such pages can swap content quickly. In sandbox runs the page made no external network calls, showed no wallet-connection prompts, and showed no clipboard manipulation or cloaking. The risk therefore rests mainly on the third-party detections and the form and DOM behaviour, not on observed credential-theft or wallet-draining activity. Evidence:

• Homepage: the page is titled as a "secure multi-chain wallet resolution protocol" but names no operator and gives no product detail beyond that generic claim.
• Homepage behaviour: six forms that post to external destinations were detected, and DOM mutations numbered 4,752 after interaction.
• Sandbox runs: all three runs completed, with 9 console errors and no external network requests, wallet-connection attempts, or clipboard writes.
• Reputation checks: two engines rated the domain malicious and one suspicious, and a blacklist hit is confirmed across two sources.

Regulatory Verification Notes

The analysis found no licensing, registration, or regulatory disclosure on the captured homepage. The site offers no legal, terms, or about content that would let a reader tie it to an accountable entity. Independent verification of the operator's identity was not achieved. Any claim of legitimacy made by the page therefore stands unsupported and cannot be treated as established. The site is not linked to any third-party regulated-entity record, and no broker-reputation match was found. This absence is a verification limit and does not by itself indicate fraud. Given the adverse reputation findings above, it removes any offsetting assurance. Basic transport security is in place but is not a marker of legitimacy. Evidence:

• Homepage: no company name, licence, registration number, or jurisdiction is presented.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 at DV (domain-validated) level, valid to 2026-12-13 (47 days remaining).
• Third-party reputation: no broker-intelligence match for the domain.

What to Verify Next

Verification should start with the adverse reputation findings. They should be re-checked directly against the relevant security-intelligence sources, and the site should be treated as unsafe until they are resolved or retracted. Anyone claiming an association with this "protocol" should be asked for a verifiable corporate identity, a registered project name, and published, independently audited code or contract addresses. These should be confirmed through channels that do not rely on links from this site. The legitimacy of the project should be confirmed through an independent, offline route, and the official support and contact channels should be confirmed that way as well. Any wallet addresses or contract references should be checked against a public block explorer before any interaction. Evidence:

• Homepage: no contract addresses, audit reports, or team details are offered for checking.
• Homepage: the external-posting forms mean any data entered could leave the site, so their destinations should be inspected before any input.
• Reputation: the confirmed detections are the primary open item and carry the highest priority.

Summary Verdict

The site sits in a clearly elevated-risk posture. Confirmed adverse reputation findings combine with the absence of any verifiable operator identity, and neither is offset by the site's technical hygiene. The evidence supports treating the site as a high-risk, sensitive-interaction hazard until the detections are cleared.

Infrastructure Integrity

The site is served entirely through Cloudflare edge infrastructure with a valid certificate, and all observed addresses are CDN edge nodes. The origin host was not observable. This is a mitigating factor only: it shows competent delivery and no evidence of unusual DNS behaviour, but it cannot offset the reputation findings. Edge-only visibility also prevents independent verification of the true host and can mask rapid content swaps.

Closing Assessment

Use should be limited to read-only viewing. No login, credential entry, form submission, wallet connection, or financial transaction should be attempted on this site, and nothing should be downloaded from it. Further engagement should wait until the security detections are cleared and an accountable operator is independently verified.