---
title: "Is presale99bitcoins.pages.dev a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "presale99bitcoins.pages.dev"
verdict: "Critical Risk"
title: "Is presale99bitcoins.pages.dev a Scam? Trust Review, 5/100"
trust_score: 5
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/presale99bitcoins.pages.dev
assessed: 2026-10-27
---

# Is presale99bitcoins.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** presale99bitcoins.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 5 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.1 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (10 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the presale99bitcoins.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/presale99bitcoins.pages.dev/screenshots/first.png)

_What presale99bitcoins.pages.dev served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a single-page cryptocurrency promotion titled "99Bitcoins Token Presale: Now Open". It is served from a free shared Cloudflare Pages subdomain, not from a standalone branded domain. It presents itself to visitors as an early-access sale of a token under the 99Bitcoins name. Its apparent purpose is to solicit purchases or commitments of funds ahead of a token launch.


### Scam/Impersonation Risk

The most serious finding is that the site is **blacklisted**: several independent threat-intelligence engines currently classify it as malicious, and historical records also associate it with known phishing activity. That convergence is decisive and outweighs every benign technical attribute. The site trades on the 99Bitcoins name, but it runs from a generic hosting subdomain that cannot be tied to that brand. Nothing independently links the page to a real-world operator, so the presale reads as a probable brand-borrowing lure, the pattern typical of fraudulent token-presale campaigns. No conflicting legal entities were observed, so this is not an identity contradiction. The risk comes from the threat listings and the unverifiable use of a brand name around a funds-solicitation offer. Automated interaction testing found no wallet-drainer behavior, no clipboard tampering, no hidden forms and no cloaking. That is mildly mitigating, but it does not offset the listings, because malicious presale pages often turn harmful only at the point of payment or wallet signing. Evidence:

- Homepage: the page title advertises a "99Bitcoins Token Presale" that is open for participation, on a shared hosting subdomain rather than a dedicated brand domain.
- Reputation checks: five engines flagged the site as malicious and one as suspicious, and an external blacklist listing is active.
- Domain provenance: continuous presence of about 2.1 years, with 10 archive snapshots from 2024-09 to 2025-03 (2 years tracked), but with a known-phishing association in the historical record.
- Behavioral testing: 75 external background requests and 9 external POST submissions across 3 runs, 9 console errors, no wallet-connect or drainer activity detected.

### Regulatory Verification Notes

The presale makes a financial-product claim, an offering of a token to the public. The evidence gives no basis for treating it as a regulated or licensed offering, and no regulator or registry records support it. Page-level identity analysis could not confirm any operator, company or disclosed legal entity, so the site's real-world identity remains unestablished. The third-party broker-reputation dataset returned no match for the site. That is neither a clearance nor a warning, and it is not a licensing verdict. This section records the absence of verifiable regulatory standing. The threat listings described above, not this absence, drive the cautionary assessment. Evidence:

- Homepage: the offering is a token presale, with no confirmed licensed operator or registered entity behind it.
- Hosted on AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01, so it confirms encryption but not the operator's identity.

### What to Verify Next

Do not treat this presale as legitimate unless the 99Bitcoins brand independently confirms it. Confirmation should come from contact details the reader already holds or sources the reader finds independently, never from links or addresses on this page. Any claim of a token offering should be checked against the securities or financial-services registry of the reader's jurisdiction. Official support and contact channels should be confirmed through an independent route before any further engagement. If the page has already been visited, any wallet that was connected or any credential that was entered should be reviewed and its approvals revoked. Evidence:

- Homepage: the brand claim and the presale offer are made only on this hosting subdomain.
- Threat listings: the active malicious classifications mean any link or payment instruction on the page should be treated as untrusted.
- Certificate: the DV-level TLS certificate attests only to domain control, so it is no proof of the operator's identity.

### Summary Verdict

The site carries an elevated, critical-level risk posture. Active malicious classifications from multiple independent sources define the assessment. Hosting stability and a valid certificate do not establish legitimacy, and the operator's real identity is unconfirmed. The available evidence is consistent with a deceptive or harmful token-presale page, not an established, trustworthy website.


### Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host is not visible. This is a mitigating factor only. The setup is common to legitimate and malicious sites alike, and it also prevents independent verification of where the content actually runs. It cannot offset the reputational findings. The certificate is valid and issued by a recognized authority, which indicates normal operational hygiene but nothing about intent.


### Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Do not log in, connect a wallet, sign transactions, supply personal data, or send funds. If the page must be examined, do so read-only and from an isolated environment. Anyone who received the link through email, social media or messaging should report it to the platform and the relevant fraud authorities.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Behaviour in a sandbox
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of presale99bitcoins.pages.dev.

- The request stayed on presale99bitcoins.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-09-07. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2d0a |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-14 |
| Domain age | 2.13 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-09-07 |
| Archive snapshots | 10 |
| Reputation | VirusTotal: 5 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about presale99bitcoins.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [tronscanerc.pages.dev](https://trustsniffer.com/report/tronscanerc.pages.dev), a similar name (Critical Risk, 5/100)
- [blockdagpresales.pages.dev](https://trustsniffer.com/report/blockdagpresales.pages.dev), a similar name (Critical Risk, 5/100)
- [rewards-paal-ai-io.pages.dev](https://trustsniffer.com/report/rewards-paal-ai-io.pages.dev), a similar name (Critical Risk, 5/100)
- [dogeversestaking.pages.dev](https://trustsniffer.com/report/dogeversestaking.pages.dev), a similar name (Critical Risk, 5/100)
- [champions-early-access.pages.dev](https://trustsniffer.com/report/champions-early-access.pages.dev), a similar name (Critical Risk, 5/100)
- [hibachiclaim.pages.dev](https://trustsniffer.com/report/hibachiclaim.pages.dev), a similar name (Critical Risk, 17/100)
- [midenclaim.pages.dev](https://trustsniffer.com/report/midenclaim.pages.dev), a similar name (Critical Risk, 21/100)
- [boaclaim.pages.dev](https://trustsniffer.com/report/boaclaim.pages.dev), a similar name (Critical Risk, 18/100)
- [breadcat-fi-q50.vercel.app](https://trustsniffer.com/report/breadcat-fi-q50.vercel.app), another site assessed as critical-risk (Critical Risk, 21/100)
- [deepsnitch-ai.live](https://trustsniffer.com/report/deepsnitch-ai.live), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/presale99bitcoins.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/presale99bitcoins.pages.dev · assessed 2026-10-27.*