Is unich-quests-net.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The site is a single-page "airdrop campaign" landing page published on a free shared-hosting subdomain. Its title reads "Unich Airdrop Campaign & Earn Free Tokens". It invites visitors to take part in a token giveaway and to earn free tokens through quests. The apparent model is crypto-incentive lead generation, a format commonly used to funnel visitors into wallet-connection or account-onboarding steps.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several tier-one security vendors independently flag the site as malicious, and a further vendor rates it suspicious. The site is blacklisted by external threat-intelligence sources, which triggered the protective cap on its rating. Prior archive records also associate the host with known phishing activity. The "free tokens" and "quests" lure matches a widely abused pattern. The campaign is branded around a named crypto project but sits on a generic shared-platform subdomain, not a standalone domain tied to that project. Nothing independently links it to the project's genuine operators. Sandbox behaviour was mixed. The sandbox recorded no wallet-drainer activity, clipboard manipulation, hidden forms or external password forms. However, a heavy share of page activity went to third-party destinations, several of them outside the commonly recognised set. The page also sits behind an access-gating challenge, so its content can change without notice. These mitigating observations do not offset the external detections. No conflicting legal identities were observed. Evidence:

• Homepage: titled as an airdrop campaign promising free tokens, with no standalone brand domain.
• Reputation checks on the site's address: malicious verdicts from multiple tier-one security vendors, and a blacklist hit.
• Sandbox of the homepage: 15 external XHR/fetch calls, 3 external POST requests and 3 non-whitelisted destinations. No wallet-drainer, clipboard-hijack, hidden-form or external-password-form behaviour was detected.
• Domain registration and archive history were not available for analysis, so no provenance conclusion is drawn from them.

Regulatory Verification Notes

The captured content shows no company name, licence, registration number or other legal disclosure. For an offering that distributes tokens and invites participation, this means no accountable entity is evident. No third-party broker or regulatory-register entry matched the site, which is neutral and not a clearance. The only protective elements in the technical record are transport-level. Verified identity cannot be established from the evidence, and the apparent link to the named crypto project remains an unsupported on-page claim. Evidence:

• Homepage: no operator identity, licensing statement or registration details in the captured text.
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-05. This confirms encryption, not operator identity.
• Hosting: served from AS13335 (Cloudflare, US).

What to Verify Next

Before any interaction, the claimed link to the named project should be checked against the project's officially published channels, reached by typing the address manually or through an independently known route. Nothing should be inferred from links on this page or from social-media promotions that point to it. Any statement that the campaign is officially endorsed should be confirmed with the project's team. It would also be worth confirming that no wallet signatures, seed phrases or approvals have been requested. Anyone who has already connected a wallet or entered credentials here should review and revoke token approvals and change affected passwords. Evidence:

• Homepage: the airdrop and quest claims are made without a verifiable sponsor or official announcement.
• Reputation checks: current external detections apply to this specific address, not to the wider project the page names.

Summary Verdict

The site reads as a high-risk token-giveaway page. Confirmed external threat detections drive a clearly cautionary posture that nothing else in the evidence offsets. Its operator identity is unverified, and the apparent connection to the project it names is unsupported.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin is not observable. Such protection is a mitigating factor at most and does not indicate legitimacy. The bot-challenge layer and edge-only visibility limit independent hosting verification, and the site's DNS behaviour shows frequent address rotation. Here the infrastructure does not offset the external detections.

Closing Assessment

Treat the site as unsafe for any sensitive action. Do not connect a wallet, sign transactions, enter credentials or provide personal or financial details. At most, view it passively and avoid downloading anything from it.