---
title: "Is swap-cow-ti.pages.dev a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "swap-cow-ti.pages.dev"
verdict: "Critical Risk"
title: "Is swap-cow-ti.pages.dev a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/swap-cow-ti.pages.dev
assessed: 2026-10-27
---

# Is swap-cow-ti.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** swap-cow-ti.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 13 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WE1) | Noted |
| Hosted by | CLOUDFLARENET (Server in US) | Noted |

## The page as captured


![Screenshot of the swap-cow-ti.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/swap-cow-ti.pages.dev/screenshots/first.png)

_What swap-cow-ti.pages.dev served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a hosted subdomain on a free, shared web-publishing platform. Its name suggests a cryptocurrency token-swap theme. When the analysis captured its entry page, the visitor was shown a security interstitial titled as a suspected-phishing warning, not any product, service, or business content. The site's apparent purpose therefore cannot be established from its own content. The only observable behavior is a gated, warning-bearing entry point on disposable-style hosting.


### Scam/Impersonation Risk

This site carries a **confirmed blacklist** condition and is assessed as high risk. A substantial group of independent security engines currently flags the domain as malicious. These include several tier-one security vendors, whose detections the assessment treats as decisive. The page returned to the analysis was an access-blocked response titled as a suspected-phishing warning. That is consistent with the external detections and counts against the site. No impersonation of a specific brand and no conflicting legal identities were established, because no identity content was reachable. The contradictions are therefore reputational and threat-driven, not identity-driven. Sandbox behavior was mixed. The page made no wallet-connection attempts, clipboard manipulation, hidden forms, or credential posts to third parties, and all outbound requests went to recognized destinations. However, outbound traffic dominated the page's activity and it produced a high volume of script errors. A token-swap-style name on free hosting, combined with active threat detections, matches the profile of throwaway lures used for credential or wallet-theft campaigns. This does not establish that the owner is the actor. Evidence:

- Homepage: the captured page was blocked behind a bot challenge with an access-denied status and carried the title "Suspected Phishing", so no site content could be assessed.
- External reputation: 13 security engines flagged the domain as malicious and 1 as suspicious, including three tier-one vendors, which triggered the strongest reputational cap.
- Homepage behavior across three sandbox runs: 24 outbound background requests and 4 outbound posts, none to unrecognized destinations, with 18 console errors and no wallet-connect, drainer, or clipboard-hijack activity.

### Regulatory Verification Notes

The captured content gives no operator name, legal entity, registration number, or licensing information. The only page reached was the warning interstitial, so no terms, privacy, about, or contact pages could be assessed. Real-world identity of the operator is therefore unverified, and the evidence supports no claim of regulated status. No third-party broker or regulator database record matched the site, so there is no external reputational signal on regulatory standing. The site's technical foundations are ordinary and do not offset the threat detections. Its transport encryption is valid but only domain-validated, meaning it confirms control of the hostname and says nothing about who operates it. Evidence:

- Transport layer: TLS certificate issued by WE1 (domain-validated), valid to 2026-11-30.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Third-party registry check: no broker or regulatory match for this site.

### What to Verify Next

Verification should begin with the original source of any link that led to this address. The question is whether it came from an official, independently confirmed channel of a known brand or from an unsolicited message, advertisement, or social post. If the site claims to represent an existing swap or exchange service, its official domain should be confirmed through that project's established channels. Reaching it from a bookmark or typed address is safer than following this link. Any claimed licensing, registration, or support channel should be checked offline against the relevant public registry or directly with the named organization. Recipients of this link who have already interacted with the page should review any wallet approvals or reused credentials. Evidence:

- Homepage: the only content reached was a phishing-warning interstitial, so no brand or operator claim exists to validate.
- Identity: the site cannot be independently tied to any real-world brand or person.

### Summary Verdict

The site's overall posture is high risk. The decisive factor is a confirmed negative reputation from multiple independent security sources. Nothing observed in the site's identity or content offsets it, and the operator remains unidentified. Standard technical hygiene does not change this assessment.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall. All four observed addresses are Cloudflare edge servers on AS13335, and the origin server was not observable. This arrangement is a mitigating factor for availability and basic transport security only, and it is not evidence of legitimacy. The edge-only visibility also prevents independent verification of where the content is actually hosted. Protective infrastructure cannot counter the independently confirmed reputation risk here.


### Closing Assessment

This address should not be visited for any sensitive purpose. No credentials should be entered, no wallet should be connected or transaction approved, and nothing should be downloaded from it. If the link arrived unsolicited, it should be treated as hostile, reported to the hosting platform's abuse channel, and discarded, with any prior interaction followed by credential rotation and wallet-approval review.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of swap-cow-ti.pages.dev.

- The request stayed on swap-cow-ti.pages.dev. It was not redirected to another domain. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c92 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-30 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 13 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about swap-cow-ti.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [nibiru-fi-6c6.pages.dev](https://trustsniffer.com/report/nibiru-fi-6c6.pages.dev), a similar name (Critical Risk, 5/100)
- [isthatblep-airdrop.pages.dev](https://trustsniffer.com/report/isthatblep-airdrop.pages.dev), a similar name (Critical Risk, 8/100)
- [mugicateth-vip.pages.dev](https://trustsniffer.com/report/mugicateth-vip.pages.dev), a similar name (Critical Risk, 5/100)
- [sol212.pages.dev](https://trustsniffer.com/report/sol212.pages.dev), a similar name (Critical Risk, 5/100)
- [qudefi-ia.pages.dev](https://trustsniffer.com/report/qudefi-ia.pages.dev), a similar name (Critical Risk, 0/100)
- [algorithmrectify.pages.dev](https://trustsniffer.com/report/algorithmrectify.pages.dev), a similar name (Critical Risk, 15/100)
- [w-20ab-delta-app.pages.dev](https://trustsniffer.com/report/w-20ab-delta-app.pages.dev), a similar name (Critical Risk, 21/100)
- [karak-network-airdrops.pages.dev](https://trustsniffer.com/report/karak-network-airdrops.pages.dev), a similar name (Critical Risk, 5/100)
- [356007.com](https://trustsniffer.com/report/356007.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [plpsupport.com](https://trustsniffer.com/report/plpsupport.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/swap-cow-ti.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/swap-cow-ti.pages.dev · assessed 2026-10-27.*