Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
helpdeskrepos.pages.dev shows high-risk / scam indicators.
| What this site appears to be | A crypto support page branded 'GitHub Blockchain Support' that offers wallet recovery, token claims, airdrop claims, trading and staking help. It requests wallet connection and wallet validation and promises recovery of lost funds, with no verifiable GitHub affiliation, operator identity, contact details or fee disclosure. This is a high-risk pattern consistent with wallet-drainer or fake-recovery scams. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 29 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website presents itself as "GitHub Blockchain Support", a crypto help-desk landing page with a live-chat style "1 new message" banner and a "Talk to an Agent" prompt. It offers help with wallet issues, migration, token claims, airdrops, swaps, slippage, staking and whitelisting, and promises recovery of lost or missing funds. Its apparent purpose is to steer visitors into connecting or "validating" a crypto wallet. No fee schedule or operator is disclosed.
Scam/Impersonation Risk
Contradictory signals are present and serious. Several threat-intelligence engines currently flag the site as malicious or suspicious, and the site is blacklisted by external reputation sources. The homepage borrows the GitHub name for a crypto-recovery service, yet nothing on the page ties it to GitHub, and the site sits on a free shared-hosting subdomain rather than any GitHub-controlled property. The homepage asks visitors to "Connect to a wallet" (automatically or manually) and to "validate your wallet via Multisig". It also promises to "recover lost or missing funds" and gates trading behind "trusted payment source" status. These are the standard mechanics of wallet-drainer and fake-recovery schemes, because they ask for the highest-stakes action with no proof of who is asking. The long menu of "click here" categories (migration, rectification of "strange wallet issues", claim, claim airdrop, swap, slippage, staking, whitelist) is generic and appears designed to funnel any crypto grievance into the same wallet-connection step. The "Open-Source Software" and "Wallet Encryption" knowledge-base items add developer-sounding credibility but no verifiable substance. The page could not be fully inspected because a bot challenge blocked the capture. Automated sandbox runs did not observe a wallet-provider handshake, so no live draining behaviour is confirmed. That does not offset the blacklist hits and the content pattern. No conflicting legal entities were found, because no legal entity is named at all. Evidence:
- Homepage: branded "GitHub Blockchain Support" with no verifiable GitHub link, operator name, contact details or address.
- Homepage: wallet connection and wallet "validation via Multisig" prompts, fund-recovery promises and "trusted payment source" gating for trading.
- Domain provenance: registered in 2026 (~0.08 years, about 31 days old); 3 archive snapshots spanning 2026-09-20 to 2026-09-22 (1 year tracked), so the domain is brand new and thinly archived.
- Reputation: several independent engines report malicious or suspicious detections, with additional external blacklist listing.
Regulatory Verification Notes
The homepage discloses no company name, jurisdiction, licence, registration number, fee terms or complaints procedure. This is a serious gap for a site that asks users to hand over wallet access or pay for "recovery". No regulator or licensing authority is cited, and no third-party broker or regulatory record corresponds to the site. A missing licence alone would be a transparency gap, but here it compounds the confirmed reputational listings. The site's real-world operator is unidentified, so no legitimacy conclusion can be drawn. Its valid transport encryption confirms only that traffic is encrypted. It says nothing about who runs the service or whether it is honest. Evidence:
- Homepage: no legal entity, licence, registration number or fee disclosure appears anywhere in the captured content.
- Homepage: no contact address or support channel beyond an embedded helpdesk-style chat widget.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-11-30.
What to Verify Next
Independent checks should start with GitHub itself. GitHub's official, separately sourced channels can confirm that it operates no "Blockchain Support" service, and no wallet-recovery or token-claim help desk. Any claimed relationship should be checked directly with the claimed operator through an independent route. Genuine wallet or protocol problems should be raised only through the official website or app of the wallet or protocol concerned, reached from a bookmark or the official store listing, not from a link supplied by the site. Any entity asking for fees to "recover" funds should be checked against the relevant financial-regulator registry before any contact. Official support and contact channels should also be confirmed offline. Evidence:
- Homepage: asserts GitHub branding with no corroboration on the page.
- Homepage: fund-recovery and "trusted payment source" language implies paid assistance with no named recipient.
- Reputation: current malicious and suspicious detections justify independent confirmation rather than reliance on the site's own claims.
Summary Verdict
The site is assessed as high-risk and untrustworthy. Confirmed blacklist listings, a brand-borrowing crypto-recovery pitch and an unidentified operator converge on a pattern typical of fake-recovery and wallet-drainer schemes. Its very recent creation and unverified identity give no credible basis for legitimacy.
Infrastructure Integrity
The site is served through Cloudflare's CDN and WAF, and every observed address belongs to Cloudflare edge servers, so the origin server is not visible. The transport certificate is valid and issued by a known authority. Protective infrastructure is a mitigating factor only. It does not offset the reputation findings, and it also prevents independent verification of where the content is actually hosted.
Closing Assessment
The site should not be used for anything beyond passive viewing. No wallet should be connected or validated, no seed phrase, private key or credentials entered, and no payment made. Anyone who has already interacted with it should immediately revoke wallet permissions, move remaining assets to a fresh wallet, and report the site to the relevant platform and fraud-reporting channels.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, several checks together.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of helpdeskrepos.pages.dev.
- The request stayed on helpdeskrepos.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-09-20. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2cee |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-30 |
| Domain age | 0.08 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-09-20 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about helpdeskrepos.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.