Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
snoofi-airdrop.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.9 years oldRegistered history | Clear |
| Web archive | Archived since 20243 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website is a single-page promotional site published on a free, shared Cloudflare Pages subdomain. It is titled "$SNOOFI" and, judging by its hostname, presents itself as a token airdrop. The homepage carries only a few sentences of text, with no visible product description, team, or documentation. Its apparent purpose is to promote a crypto-token giveaway or claim campaign, though the page content does not describe a business model beyond that.
Scam/Impersonation Risk
The site carries a confirmed blacklist against it. Reputation sources have flagged the domain, with one engine rating it malicious and two others rating it suspicious. This is the decisive contradiction and cannot be offset by the technical hygiene seen elsewhere. The airdrop framing, the "$SNOOFI" token branding and the free-subdomain hosting form a pattern commonly used for token-claim lures. Such pages typically ask visitors to connect a wallet or sign transactions to receive a promised distribution. The captured homepage shows no wallet-connect prompt, clipboard manipulation, hidden forms or content cloaking during sandbox interaction. That limits what could be demonstrated, but it does not offset the blacklisting. The page also shows a heavy reliance on third-party network calls. Several background requests went to destinations outside the site's own infrastructure, and some of those destinations are not recognised, commonly trusted services. No conflicting legal identities were found, and the only history is a thin web-archive record of a young domain.
- Homepage and reputation sources: the domain is blacklisted by external threat-intelligence sources, with 1 malicious and 2 suspicious detections.
- Homepage behaviour: 6 external background requests were observed, 3 to non-whitelisted destinations, with up to 72.7% of traffic going outside the site's own origin and 3 console errors recorded.
- Homepage behaviour: no wallet-provider interaction, drainer pattern, clipboard write, hidden form or cloaking was observed across 3 successful sandbox runs.
- Provenance: 3 archive snapshots spanning 2024–2025 (2 years tracked, first seen 2024-12-18), with domain continuity of about 1.9 years.
Regulatory Verification Notes
The homepage discloses no operating company, jurisdiction, licence, registration number, terms of service or privacy policy. No legal or identity pages were captured, and the page text is only a few sentences long. Nothing on the site can therefore be tied to a named legal entity or to any financial or token-offering regime. Any claim of a legitimate distribution would rest entirely on unverifiable assertions. Because the site offers a token airdrop, the absence of any disclosure of terms, eligibility or issuer is a material content gap. No third-party broker or regulatory listing was matched, and none can be inferred. Real-world identity is unconfirmed, and nothing in the evidence supports treating the operator as a verified entity.
- Homepage: roughly 150 characters of text, with no company name, address, licence, registration number, or legal links.
- Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US) on a shared platform subdomain rather than a standalone, independently registered brand domain.
- Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-24 with 56 days remaining. This confirms encrypted transport only, not operator identity.
What to Verify Next
Prospective visitors should not proceed to any claim or connection step. Anyone who still needs to assess the campaign should establish whether the "$SNOOFI" token and its airdrop are announced through the project's own official channels, as confirmed offline or through an independently known source and not through links on this page. The claimed issuer should be checked against blockchain explorers and independent token-listing directories to see whether a legitimate contract and distribution exist. Any request to connect a wallet, sign a message or approve a token allowance should be treated as unsafe until the issuer is independently confirmed.
- Homepage: the airdrop is presented without any named issuer, contract reference or eligibility criteria that could be checked externally.
- Reputation record: the standing detections against the domain should be re-checked with the listing sources before any reconsideration of the site.
- Hostname: the free shared subdomain means no independently owned domain exists to cross-check against announced project channels.
Summary Verdict
The available evidence supports a low-trust, elevated-risk assessment. A confirmed external blacklisting is combined with a young, thinly documented, anonymous airdrop page. The site's technical hygiene does not outweigh its reputation, and its legitimacy is unsupported rather than merely unverified.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge node; no origin server was observable. This is a mitigating factor only, since it reflects a mainstream, well-run platform rather than anything about the site's operator. Edge-only visibility also prevents independent verification of where the content is actually hosted, and it allows the page content to be swapped quickly without any change to the visible infrastructure. The platform's reputation therefore cannot offset the site's threat-intelligence listings.
Closing Assessment
At most, the page should be viewed read-only. No wallet should be connected, no transaction or token approval signed, no credentials entered and no payment or funds sent, until the campaign is independently confirmed through channels that do not rely on this site.
Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of snoofi-airdrop.pages.dev.
- The request stayed on snoofi-airdrop.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2024-12-18. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f1b |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-24 |
| Domain age | 1.86 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-12-18 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about snoofi-airdrop.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.