--- title: "Is scfraft.com Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "scfraft.com" verdict: "Low Trust" title: "Is scfraft.com Safe? Warning Signs, Score 25/100" trust_score: 25 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/scfraft.com assessed: 2026-10-20 --- # Is scfraft.com safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** scfraft.com is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk Assessed 2026-10-20 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | A SHITCOIN token airdrop page that invites visitors to connect a Solana wallet and claim tokens under a 7-day countdown. It offers no verifiable team, legal identity, contract details, or contact information, and it uses homoglyph and zero-width characters in its text, which is a deception signal. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | None flagged it (VirusTotal) | Clear | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 11 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (2 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YE2) | Noted | ## The page as captured ![Screenshot of the scfraft.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/scfraft.com/screenshots/first.png) _What scfraft.com served when TrustSniffer captured it on 2026-10-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - No flags from the reputation services TrustSniffer consulted at assessment time. ## Full analysis ### Overview This website is a single-page crypto token airdrop portal branded "shitcoin". It invites visitors to connect a Solana wallet and claim free SHITCOIN tokens before a seven-day countdown ends. The page presents itself as a Solana-based DeFi project with platform, resources and legal menus. Its apparent purpose is to attract wallet connections and community engagement through a limited-time token giveaway, and it states no funding or revenue model. ### Scam/Impersonation Risk No contradictions were observed in the formal sense. No threat-intelligence source flags the site, no phishing or brand impersonation was detected, and no conflicting legal identities appear, because the site names none at all. The content, however, carries clear deception-oriented characteristics that call for caution. The homepage text is deliberately obfuscated with look-alike (homoglyph) characters and invisible zero-width characters, which can defeat keyword filtering and brand matching and is not ordinary formatting. The airdrop mechanics combine several pressure and eligibility devices: a seven-day countdown, a "limited time opportunity for early adopters" appeal, and requirements to hold tokens in the connecting wallet and follow a social account. The headline figures are a pool of 1,000,000 tokens, 50,000 participants, a token price of $0.000003, "$2.5M total volume", "150K+ active users" and "24/7 support". These claims sit beside "revolutionary DeFi project" and "join millions of users" language. For a page that has existed only days, none of it is supported by a verifiable contract address, audit, team, product or support channel. The footer links to a whitepaper, roadmap, tokenomics, trading and staking pages, but the captured page shows no contact channel or contract details to back them. The page also does not explain how the project is funded or how the token holds value. In the behavioral sandbox runs, no wallet-draining routine, clipboard manipulation or hidden form submission was observed. That is a mitigating observation about what the page did in testing, not evidence that a wallet connection is safe. Evidence: - Homepage: the visible text mixes look-alike and zero-width characters throughout the title, headings, buttons and footer, and a seven-day countdown sits beside the "Claim Tokens" and "Connect Wallet" prompts. - Homepage: the stat counters (1,000,000 tokens, 50,000 participants, $2.5M volume, 150K+ users) have no contract, explorer link, audit or named team behind them. - Domain provenance: registered on 2026-10-07 (~0.03 years, about 12 days old), and the web archive holds 2 snapshots, both captured on 2026-10-08 (1 year tracked). - Sandbox behavior: three of three runs loaded successfully and showed no cloaking, hidden forms or wallet-drainer activity. ### Regulatory Verification Notes The page lists a legal section (privacy policy, terms of service, cookie policy, disclaimer) in its footer. It names no legal entity, jurisdiction, registration number or licensing authority. It is not presented as a regulated financial service, and no third-party reputational record for it was found. Offering and distributing a crypto token to the public can carry securities, consumer-protection and financial-promotion obligations in many jurisdictions. The site makes no statement about any of them. This is a verification gap, not proof of wrongdoing. A DV-grade encryption certificate and a clean reputation record show only that the site is technically well formed and not yet reported. They do not establish who operates it. Evidence: - Homepage footer: legal, privacy, terms, cookie and disclaimer links appear, but the captured content identifies no operating company, address or regulator. - Homepage: the copyright line names only the brand "shitcoin", with no legal entity. - Transport security: the TLS certificate is DV-validated, issued by YE2 and valid to 2027-01-05. - Network: served from AS13335 (Cloudflare, Inc., US); domain registered via PDR Ltd. d/b/a PublicDomainRegistry.com, expiring 2027-10-07. ### What to Verify Next Before connecting a wallet or acquiring the token, a prospective participant should look for the token's contract address. It should be confirmed independently on a public Solana block explorer, including mint authority, holder distribution and liquidity, rather than through links on the page. The project's claimed social account and team should be checked for history that predates the domain's registration. Any claim of "$2.5M volume" or "150K+ users" should be tested against independent on-chain data. Official support and contact channels should be confirmed through an independent route. If any wallet interaction is considered, a separate low-balance wallet with no other assets and no standing token approvals limits the exposure. Evidence: - Homepage: eligibility rules require holding tokens in the connecting wallet and following a social account, so identity and approval checks can be done before connecting. - Homepage: no contract address is shown, so on-chain details must be sourced externally. - Domain provenance: the domain is about 12 days old, so any claimed project history should be traceable to dates after 2026-10-07. ### Summary Verdict The available evidence supports a low-trust posture. The site is technically well formed and has no confirmed external threat listing. Its content shows consistent claim-versus-evidence gaps, very recent origin and deliberate text obfuscation, and its operator identity is unverified. Legitimacy cannot be inferred from the evidence collected, and the site reads as an unestablished token promotion. ### Infrastructure Integrity The site is delivered through Cloudflare's CDN/WAF, and all four observed addresses (two IPv4, two IPv6) are Cloudflare edge servers. The origin server was not observable. This is a mitigating factor, since the infrastructure is mainstream and the shared network has no abuse reports and a clean reputation. It is not evidence of legitimacy. Edge-only visibility also means hosting cannot be independently verified, and content can be changed quickly without any visible change in network location. ### Closing Assessment Treat the page as an unverified promotion. Do not connect a wallet, approve token permissions or move meaningful funds until the project's contract, team and claims have been independently confirmed. Ordinary browsing of the page carries little technical risk. _Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by page content, hosting and network, history in the web archive, several checks together. ### 01 Page content - The review of the page content rated it high risk. (Page content `rule:PAGE_RISK_HIGH`) - The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`) - The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) ### 03 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 04 Several checks together - No external feed lists the site, but its own page content reads as risky. (Several checks together `rule:HYB_POSITIVE_EXTERNAL_NEGATIVE_PAGE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of scfraft.com. - The request stayed on scfraft.com. It was not redirected to another domain. (Clear) - Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-10-07. (Noted) - The earliest public archive of this site is from 2026-10-08. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3036::6815:5302 | | Name servers | JILL.NS.CLOUDFLARE.COM, NOEL.NS.CLOUDFLARE.COM | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | YE2 | | SSL expiry | 2027-01-05 | | Domain age | 0.03 years (continuous registration) | | Domain expiry | 2027-10-07 | | Archive first seen | 2026-10-08 | | Archive snapshots | 2 | | Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about scfraft.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [richlandscrewmachine.com](https://trustsniffer.com/report/richlandscrewmachine.com), another .com site assessed as low-trust (Low Trust, 25/100) - [brigadeled.com](https://trustsniffer.com/report/brigadeled.com), another .com site assessed as low-trust (Low Trust, 25/100) - [alsharifkec.com](https://trustsniffer.com/report/alsharifkec.com), another .com site assessed as low-trust (Low Trust, 40/100) - [bijayaluminiumfab.com](https://trustsniffer.com/report/bijayaluminiumfab.com), another .com site assessed as low-trust (Low Trust, 25/100) - [christmasstocking.com](https://trustsniffer.com/report/christmasstocking.com), another .com site assessed as low-trust (Low Trust, 40/100) - [aaafinancebd.com](https://trustsniffer.com/report/aaafinancebd.com), another .com site assessed as low-trust (Low Trust, 40/100) - [bamfordproduce.com](https://trustsniffer.com/report/bamfordproduce.com), another .com site assessed as low-trust (Low Trust, 40/100) - [kamelotauctions.com](https://trustsniffer.com/report/kamelotauctions.com), another .com site assessed as low-trust (Low Trust, 40/100) - [sarancorporation.co.jp](https://trustsniffer.com/report/sarancorporation.co.jp), another site assessed as low-trust (Low Trust, 40/100) - [judithleoni.com](https://trustsniffer.com/report/judithleoni.com), another .com site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23) - [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether) - [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27) --- *Source: [TrustSniffer](https://trustsniffer.com/report/scfraft.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/scfraft.com · assessed 2026-10-20.*