---
title: "Is isthatblep-airdrop.pages.dev a Scam? Trust Score 8/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "isthatblep-airdrop.pages.dev"
verdict: "Critical Risk"
title: "Is isthatblep-airdrop.pages.dev a Scam? Trust Review, 8/100"
trust_score: 8
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/isthatblep-airdrop.pages.dev
assessed: 2026-10-29
---

# Is isthatblep-airdrop.pages.dev a scam? TrustSniffer's high-risk assessment: 8/100

## Verdict


**Verdict: Critical Risk, trust score 8/100.** isthatblep-airdrop.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-29 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 1.9 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (7 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


No screenshot is retained for this report.

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a minimal single-page property on a shared Cloudflare Pages subdomain. Its hostname presents it as a token "airdrop" destination, but the page itself carries only a short block of text under the title "Brishthefish Branding". It offers no visible product, company description or service, so its purpose and business model cannot be established from the content. The hostname and the page title do not obviously match.


### Scam/Impersonation Risk

Confirmed contradictions are present. Multiple independent threat-intelligence engines classify the site as malicious, and a further engine marks it suspicious. The domain is therefore **blacklisted** by third-party reputation sources. This is the decisive finding and heavily outweighs the neutral technical hygiene described later. No brand impersonation and no conflicting legal identities were observed. The risk rests on the blacklisting and on the site's behaviour. "Airdrop" is a theme commonly used to lure visitors into wallet connections or credential entry. The page shows no explanatory content to justify that framing, and none of its text identifies a project, token or issuer. In sandbox testing the page generated heavy outbound traffic: roughly one hundred external background requests and several external data submissions. Almost all of its network activity went to third-party destinations, and all of those destinations were recognised, mainstream services. All three automated visits failed to complete cleanly and produced a high volume of script errors. No wallet-connection prompt, clipboard manipulation, hidden form, external password form or content cloaking was observed. Those absences keep the finding at a reputational rather than a demonstrated-attack level, but they do not offset the blacklisting. Evidence:

- Homepage and hosting domain: multiple threat-intelligence sources flag the domain as malicious or suspicious, and an external blacklist hit is recorded.
- Homepage behaviour: about 102 external background requests and 9 external POSTs, with roughly 96% of external traffic concentrated on third-party hosts and 28 console errors across failed sandbox runs.
- Domain provenance: registration continuity of about 1.9 years (roughly 1.87), with 7 archive snapshots spanning 2024–2026 (first captured 2024-12-16, last 2026-08-07, 3 years tracked). This is a young, thinly archived history.

### Regulatory Verification Notes

The site contains no legal, terms, privacy or about content. Its only visible text is a short branding line, so no operating entity, licence, registration number or jurisdiction is stated anywhere. Ownership is opaque. The shared platform subdomain gives no independent route to the real operator, and operator identity remains unverified. This is an ownership-opacity condition, not an identity contradiction, because no competing legal entities appear. No third-party broker or regulator record matched the site, and none should be inferred. The blacklisting above is the operative risk signal. The regulatory position is simply that nothing on the site supports any claim of authorised or supervised activity. Evidence:

- Homepage: roughly 79 characters of visible text and no legal-entity name, licence reference or contact page.
- Site-wide: no terms, privacy policy or about page exists to examine for jurisdiction or operator details.
- Transport security: TLS certificate issued by WE1 (domain-validated only, which confirms control of the hostname but not who operates it), valid to 2026-12-26.
- Hosting: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Any claim that this page distributes tokens should be checked only against the announcing project's official channels, reached independently of this site (for example, a documented website address or a verified social account found through a separate search). The project's official communications should be checked for any mention of this hostname. If the site is connected to the reader's own organisation, its owner should check for unauthorised content or file changes and request re-evaluation once any issue is resolved. The identity behind the "Brishthefish" branding should be established through an independent source before any engagement. No wallet should be connected and no credential entered while this reputation status stands. Evidence:

- Hostname: the "airdrop" label appears in the subdomain, but the homepage names no project or token it belongs to.
- Homepage title: "Brishthefish Branding" is the only identifier and is not tied to any verifiable organisation.
- Reputation status: current threat-intelligence listings are the baseline against which any future re-check should be compared.

### Summary Verdict

The overall posture is high-risk. External threat detections are present, and the site's behaviour and thin provenance reinforce that picture. Technical hygiene is basic, with a valid encrypted connection and mainstream hosting, but it does not carry weight against the reputation findings. The site cannot be treated as trustworthy for any sensitive purpose.


### Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge address with no origin server visible. The connection is encrypted with a currently valid, publicly issued certificate. This is a mitigating factor only. It shows the site is competently hosted but says nothing about the intent of the content it serves. Edge-only visibility also prevents independent verification of the true host and allows content to be swapped quickly without any change in network identity.


### Closing Assessment

Interaction should be limited to passive viewing at most. No wallet connection, login, credential entry, payment or file download should occur on this site. Any attempt to claim an airdrop should be made only through independently confirmed official channels. Organisations should block or flag the domain pending a clean reputation re-evaluation.


_Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of isthatblep-airdrop.pages.dev.

- The request stayed on isthatblep-airdrop.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-12-16. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f5f |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-26 |
| Domain age | 1.87 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-12-16 |
| Archive snapshots | 7 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about isthatblep-airdrop.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [mugicateth-vip.pages.dev](https://trustsniffer.com/report/mugicateth-vip.pages.dev), a similar name (Critical Risk, 5/100)
- [sol212.pages.dev](https://trustsniffer.com/report/sol212.pages.dev), a similar name (Critical Risk, 5/100)
- [qudefi-ia.pages.dev](https://trustsniffer.com/report/qudefi-ia.pages.dev), a similar name (Critical Risk, 0/100)
- [algorithmrectify.pages.dev](https://trustsniffer.com/report/algorithmrectify.pages.dev), a similar name (Critical Risk, 15/100)
- [w-20ab-delta-app.pages.dev](https://trustsniffer.com/report/w-20ab-delta-app.pages.dev), a similar name (Critical Risk, 21/100)
- [karak-network-airdrops.pages.dev](https://trustsniffer.com/report/karak-network-airdrops.pages.dev), a similar name (Critical Risk, 5/100)
- [shepsky-ai.pages.dev](https://trustsniffer.com/report/shepsky-ai.pages.dev), a similar name (Critical Risk, 5/100)
- [izumi-finance.pages.dev](https://trustsniffer.com/report/izumi-finance.pages.dev), a similar name (Critical Risk, 5/100)
- [wxrp.org](https://trustsniffer.com/report/wxrp.org), another site assessed as critical-risk (Critical Risk, 5/100)
- [89324902-28.com](https://trustsniffer.com/report/89324902-28.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/isthatblep-airdrop.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/isthatblep-airdrop.pages.dev · assessed 2026-10-29.*