Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pons-live.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Pons is a single-page website titled "Community Airdrop Claim · Robinhood Chain". It presents itself as a landing page where visitors can claim a token airdrop tied to the Robinhood Chain ecosystem. Its apparent purpose is to draw visitors into a crypto-asset claim flow, a format commonly used to solicit wallet interactions or credentials.
Scam/Impersonation Risk
This is the most serious area of concern. An external threat-reputation source currently lists the domain, and that listing is a confirmed blacklist hit. It is the decisive factor in the assessment, and no protective feature elsewhere offsets it. The site's own positioning heightens the concern. A "community airdrop claim" that borrows the name of a well-known financial brand's blockchain network is a well-established lure pattern. In that pattern the claim step is used to harvest wallet access, seed phrases or signing approvals. The sandbox did not observe a wallet-connection prompt, a clipboard-hijack attempt, hidden forms or password submission to outside parties, so no active drainer behavior was confirmed in the captured session. That absence does not neutralize the blacklist hit. The page's interactive claim flow may also not have been fully exercised. The domain is also only weeks old, so it has no track record to counterbalance the listing. No conflicting legal entities or brand-impersonation claims were established from the captured content, so the risk rests on the blacklist and the nature of the offer rather than on an identity contradiction. Network behavior adds a secondary caution. Nearly all requests the page triggers go to outside domains, and the page raised a high number of script errors. Those requests were to whitelisted destinations, so this is a hygiene and exposure concern rather than proof of malicious activity. Evidence:
- Homepage: the page is titled as a community airdrop claim on the Robinhood Chain, an offer category that depends on visitors taking an asset-related action.
- Domain registration: registered 2026-09-03 (~0.14 years, about 51 days old) through NameSilo, LLC.
- Behavioral sandbox: 3 of 3 runs succeeded with 27 external XHR requests, 9 external POSTs (none to non-whitelisted hosts) and 12 console errors. No wallet-connect, clipboard-write or hidden-form activity was recorded.
- External reputation: the domain is on a third-party blacklist, with one malicious and two suspicious detections.
Regulatory Verification Notes
The captured landing page identifies no operating company, jurisdiction, licensing body or registration number. It also gives no terms, risk disclosures or recourse channel that would allow the airdrop to be tied to a real organization. The visible claim that it relates to the Robinhood Chain is therefore unsubstantiated. Nothing in the evidence connects the site to the brand whose ecosystem it invokes, and the site's own claims should not be treated as proof of affiliation. The identity of the operator could not be independently established. No third-party broker or regulator record matched the domain. A missing license does not by itself show wrongdoing, but here it compounds a confirmed blacklist hit and gives a prospective participant no accountable counterparty. Evidence:
- Homepage: no company name, license reference or regulatory statement appears in the captured content.
- Hosting: served from AS13335 (Cloudflare, Inc., US), registry ARIN.
- Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-02 with 38 days remaining. This confirms an encrypted connection and says nothing about the operator's identity.
What to Verify Next
Any claim of affiliation with Robinhood or its blockchain should be checked only through the brand's official channels, reached independently by typing the address manually or using a known bookmark. Links from the site, social posts or messages should not be used. Official announcements should be consulted to see whether any community airdrop exists and where it is genuinely hosted. Wallet-security tooling or a read-only block-explorer review can be used to inspect any contract the page asks to interact with. This should be done before any wallet is connected, and should be done with a dedicated empty wallet. Official support and contact channels should also be confirmed through offline or independent routes. Anyone who has already interacted with the site should revoke token approvals and move assets to a fresh wallet. Evidence:
- Homepage: the page's airdrop claim is the only functionality captured, so its legitimacy rests entirely on external confirmation.
- Identity: no verified link to any named brand or legal entity was established.
- Domain age: a very recent registration means no long-standing history can corroborate the offer.
Summary Verdict
The assessment is a high-risk, clearly cautionary posture. A confirmed external blacklist listing, together with a very young domain and an offer type commonly used for asset-harvesting lures, outweighs the basic technical hygiene the site exhibits. The available evidence does not support treating the site as legitimate, and the operator's real-world identity remains unestablished.
Infrastructure Integrity
The site is fronted by a major CDN and WAF, with all observed addresses belonging to edge servers and no origin address visible. The sandbox also detected bot-protection controls and a valid, correctly formed certificate. These are mitigating factors only. They show the domain is competently deployed, not that its operator or content is trustworthy. Edge-only visibility also prevents independent verification of the underlying host and could mask a rapid change of content. The infrastructure therefore cannot offset the reputational risk.
Closing Assessment
The site should be treated as unsafe for any login, credential entry, wallet connection, transaction signing or financial interaction. At most it can be viewed passively, and nothing should be downloaded or approved from it. Any airdrop claim should be pursued only through the brand's officially announced channels.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
04 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 15% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pons-live.com.
- The request stayed on pons-live.com. It was not redirected to another domain. Clear
- Registration is published under NameSilo, LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-03. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NameSilo, LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3033::6815:11c0 |
| Name servers | ANNA.NS.CLOUDFLARE.COM, SONNY.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-02 |
| Domain age | 0.14 years (continuous registration) |
| Domain expiry | 2027-09-03 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pons-live.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.