Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
giveaway-piggycoincom.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.8 years oldRegistered history | Clear |
| Web archive | Archived since 20255 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This is a web page hosted as a subdomain on a free application-hosting platform. Its name combines the words "giveaway" and "piggycoin", which suggests a cryptocurrency giveaway or promotion built around a coin brand. When the site was analysed, the visitor-facing content was replaced by a hosting-provider interstitial titled "Suspected Phishing", returned with an access-denied response. The page therefore showed only a short warning notice. Its apparent purpose is a promotional lure, the type of page typically used to solicit wallet connections, credentials, or deposits.
Scam/Impersonation Risk
The assessment is clearly cautionary. Several major security vendors currently flag the domain as malicious, and a confirmed blacklist listing exists. The hosting provider itself served a suspected-phishing warning in place of the page. The name follows a familiar giveaway-lure pattern that imitates a crypto brand on a disposable subdomain of a shared hosting platform, and the closest lookalike match is the platform's own parent domain. No conflicting legal entities were found, and no confirmed impersonation of a specific named brand was established. The hard contradictions come from the blacklist and threat-detection signals. Automated browsing found no wallet-connection prompts, clipboard tampering, hidden forms, or externally posting password forms. Sandbox runs were nonetheless dominated by third-party requests, and the page produced many console errors, which is consistent with a thin or unstable page. The absence of those behaviours does not offset the reputation findings, and the page may serve different content to different visitors.
- Homepage: the capture returned an access-denied bot challenge with the title "Suspected Phishing | Cloudflare", and only about 380 characters of text were retrieved.
- Reputation: 11 malicious and 1 suspicious detections from external scanners, including three tier-one security vendors, plus a confirmed blacklist hit.
- Provenance: the domain is about 1.8 years old, and the web archive holds only 5 snapshots, from 2025-01-03 to 2025-03-04 (1 year tracked).
- Behaviour: 22 external XHR calls, 4 external POSTs, and 18 console errors across 3 sandbox runs. No wallet-connect, drainer, or clipboard-hijack activity was observed.
Regulatory Verification Notes
The captured page exposed no legal, terms, privacy, or about content. No operator name, company registration, or licence is available, so the site's real-world operator cannot be linked to any accountable entity. Because the content is a giveaway or crypto promotion, any activity involving token distribution, deposits, or investment would normally require regulatory authorisation, and none is shown. Ownership is opaque. This is an accountability limitation and is distinct from an identity contradiction, since only one site identity appears. No third-party broker or regulatory-database entry matched this site. Reputational warnings are therefore the only external signal, and those are the blacklist and detection findings above.
- Legal and identity pages: none were retrievable because the captured page was a warning interstitial, so no company name, address, or licence could be assessed.
- Domain provenance: the site sits on a free hosting-platform subdomain, so its registration reflects the platform rather than the operator. It is about 1.8 years old, and the archive shows activity only in early 2025.
- Transport security: a TLS certificate from issuer WE1 (DV, domain-validated only) is valid to 2027-01-13. This confirms encryption but says nothing about the operator's identity.
What to Verify Next
Do not attempt to confirm legitimacy by interacting with the site. Check the official channels of the coin or brand the name appears to reference, such as its verified social accounts and registered website, to see whether any giveaway is actually announced. Search the relevant financial or securities regulator's registry for any entity claiming to run such a promotion. Anyone who has already visited should check whether a wallet or account was connected, and should revoke wallet permissions and change reused passwords if so. Confirm the official contact and support channels of any involved brand through an independent route.
- Homepage: the hosting provider's own suspected-phishing warning is the strongest page-level indicator available.
- Domain history: the site has existed for about 1.8 years, with only 5 archived snapshots across 2025.
- Reputation: the confirmed blacklist and the 11 malicious detections justify checking the real brand's announcements before any engagement.
Summary Verdict
The site is assessed as high risk, with serious reputational contradictions that outweigh every technical hygiene indicator. It shows the profile of a phishing or scam-style giveaway lure rather than a legitimate, accountable operation. Its identity is unestablished and its operator is anonymous.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and web application firewall (AS13335, US), so all four observed addresses are edge servers and the origin host cannot be seen. A valid certificate and mainstream edge infrastructure are mitigating signals only. They are also freely available to any operator, including malicious ones, and cannot offset the external threat detections. Edge-only visibility prevents independent hosting verification and could mask rapid content changes.
- Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US), with edge IPs 172.66.44.222 and 172.66.47.34 and two IPv6 edge addresses, all in the same network.
- Origin: no origin-server address was observable.
Closing Assessment
Treat the site as unsafe for any interaction. Do not connect a wallet, sign transactions, enter credentials, submit personal data, or send funds, and do not download anything from it. Report the address to the relevant platform abuse channel and block it where possible.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of giveaway-piggycoincom.pages.dev.
- The request stayed on giveaway-piggycoincom.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2025-01-03. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2cde |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-13 |
| Domain age | 1.81 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2025-01-03 |
| Archive snapshots | 5 |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about giveaway-piggycoincom.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.