Is live-pons.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

The website live-pons.com presents a single landing page titled "Pons | Community Airdrop Claim · Robinhood Chain". It invites visitors to claim a community token airdrop tied to a Robinhood-branded blockchain network. Its apparent purpose is to steer visitors into a claim flow for a crypto token distribution, which is a model that depends on visitors trusting an unverified project and its claims.

Scam/Impersonation Risk

This is a high-risk assessment with confirmed contradictory signals. The domain is blacklisted: multiple independent threat-intelligence engines classify it as malicious or suspicious, and an additional external blacklist source corroborates this. Nothing in the evidence indicates a conflict between legal entities, and the sandbox did not detect wallet-drainer behavior, clipboard manipulation or hidden credential forms. The reputational signals still dominate. The "airdrop claim" format on a freshly created domain is a well-known lure for wallet-connection and token-approval theft. The page's association with a well-known retail brokerage's blockchain network is an unverified claim that may borrow credibility from that brand. During sandbox testing, almost all network activity went to external hosts, with dozens of external requests and several external data submissions, and the page logged repeated script errors. All of the external destinations matched known infrastructure, so this is a supporting concern rather than a confirmed exploit. Taken together, the page should be treated as a probable credential- or asset-harvesting vector until proven otherwise. Evidence:

• Homepage: titled as a community airdrop claim on a Robinhood-associated chain, with no verifiable project or operator identity on the captured page.
• Domain provenance: registered 2026-09-03 (~0.14 years, about 51 days old), so it has almost no operating history.
• Threat reputation: two engines rate the domain malicious and one suspicious, and a separate external blacklist also lists it.
• Sandbox behavior: three successful runs, with 97.6% peak external traffic share, 27 external XHR/fetch calls, 9 external POSTs and 12 console errors.

Regulatory Verification Notes

The captured homepage identifies no licensed financial entity, registration number or regulator, and no third-party regulatory source confirms the site. The operator's real-world identity has not been independently verified, so the site's own claims about the airdrop, the token and its connection to the named blockchain network carry no weight as proof. No broker-reputation dataset matched the site, so there is no external regulatory standing to rely on. Any token distribution or claim mechanism that handles user assets without a disclosed, verifiable operator should be treated as unregulated activity. Evidence:

• Homepage: no company name, jurisdiction, licence or registration reference appears in the captured content.
• Registration: domain registered through NameSilo, LLC, with the registrant details shielded by a privacy service.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: a TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-02.

What to Verify Next

Confirm independently, through the official channels of the brand and blockchain network named on the page, whether any "Pons" airdrop exists. Those channels should be reached by manually entered addresses and not by links from this page. Check any claimed token contract against the network's official block explorer and project documentation. Confirm that the operator holds a recognised registration or licence in a jurisdiction that can be named. Official support and contact channels should be confirmed through an independent route before any interaction. Evidence:

• Homepage: the claim flow and any token or contract references must be matched against official sources, not the site's own statements.
• Domain age: the roughly 51-day-old registration means no long-term public track record exists to corroborate the project.
• Identity: the operator has not been connected to any named real-world entity or person.

Summary Verdict

The overall posture is clearly cautionary and high risk. Confirmed adverse threat intelligence, a very recently created domain and an airdrop-claim format typical of asset-theft campaigns outweigh the site's technically functional, encrypted presentation. The available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address belongs to its edge network, so the origin server could not be seen. Together with a valid certificate and active bot protection, this is a mitigating factor only. It shows the site is competently fronted but says nothing about the operator's legitimacy. It also prevents independent hosting verification and can mask rapid content changes. A young-domain, sparse-subdomain pattern was noted as an unconfirmed heuristic and carries no weight on its own.

Closing Assessment

The site should not be used for login, wallet connection, token approvals, credential entry or any financial interaction. At most, any inspection should be passive and read-only. Anyone who has already connected a wallet or entered credentials should revoke token approvals, move assets to a new wallet where appropriate and change affected passwords.