Is sol212.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website titled "SOLANA Airdrop" that is published on a shared subdomain of a free static-hosting platform. It presents itself to visitors as a landing page for a cryptocurrency token giveaway tied to the Solana ecosystem. Its apparent purpose is to attract visitors with the promise of free tokens, a format that is commonly used to steer people toward wallet or account interactions. The page text and presentation do not tie it to any named company, project, or recognizable brand.

Scam/Impersonation Risk

Contradictory signals are present and carry decisive weight. Several major security vendors independently classify the site as malicious, and an external blacklist listing corroborates them. The site is therefore blacklisted on the basis of reputation sources that agree with one another. The shared-hosting platform itself carries a clean reputation, so the adverse listings attach specifically to this subdomain. The "airdrop" theme is a well-known lure pattern for wallet-draining and credential-harvesting campaigns. Automated sandbox runs did not observe a wallet-connection prompt, clipboard manipulation, hidden forms, or externally posting password forms. These are absence-of-observation results and do not clear the site. The page loaded several third-party network calls to non-allow-listed destinations. No conflicting legal identities were found, and no brand impersonation was confirmed. The cautionary posture rests on the confirmed external detections. Evidence:

• Homepage: the page title presents a Solana token airdrop, and no operator or project identity is stated on the captured page.
• Reputation checks: multiple leading security vendors flag the site as malicious or suspicious, and an external blacklist also lists it.
• Behavioral sandbox, homepage: three successful runs recorded three non-allow-listed external requests, three console errors, and no wallet-connect, clipboard-write, or hidden-form activity.
• Provenance: domain continuity of about 2.2 years, with 7 archive snapshots spanning 2024–2026 (3 years tracked); the first capture is dated August 2024.

Regulatory Verification Notes

The captured page does not disclose a licensed entity, a registration number, or governance information, and no regulated status is supported by any independent source. Because the site is a subdomain of a shared hosting platform, no distinct registrant is associated with it. This is an ownership-opacity condition and not an identity contradiction. A token-distribution offer of this kind would ordinarily require clear issuer and eligibility terms, and none are available to assess here. No third-party broker or regulatory-reputation match was found for the site, so no external view on licensing exists. Evidence:

• Homepage: no company name, jurisdiction, licence, or terms of eligibility for the advertised airdrop appear in the captured content.
• Transport security: a domain-validated TLS certificate issued by WE1, valid to 2026-12-26 (58 days remaining), confirms encryption only and says nothing about the operator.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any claim of a Solana airdrop should be checked against the official channels of the token's actual issuer, reached independently and not through this page or its links. Eligibility and claim mechanics should be confirmed there before any wallet is connected. The reputation listings should be re-checked with the relevant security vendors for delisting or updated status before the site is reconsidered. If the page is believed to belong to a legitimate project, the project's confirmed official channel should be used to establish whether it publishes this address. Official support and contact routes should be confirmed through a separate, known-good source. Evidence:

• Homepage: the airdrop offer has no named issuer against which to check eligibility.
• External reputation: the adverse vendor and blacklist listings are current and unresolved.
• Hosting model: the shared subdomain means the address alone cannot be used to confirm who controls the content.

Summary Verdict

The evidence converges on an elevated-risk posture. Confirmed adverse reputation from multiple independent sources outweighs the otherwise ordinary technical hygiene of the site. The operator's real-world identity is unverified, and nothing in the available evidence offsets the reputation findings.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the origin server was not observable. The certificate is valid and issued by a known authority. This hygiene is a mitigating factor only. It does not offset the reputation findings, and edge-only visibility limits independent confirmation of where content is served from. It also makes rapid content changes harder to detect.

Closing Assessment

The site should be treated as a read-only reference at most. Wallet connections, credential entry, logins, downloads, and any financial transaction should be avoided until the reputation listings are independently cleared.