Is wwwworrrk.pages.dev safe? TrustSniffer's moderate-trust assessment: 52/100

Overview

This website is a single-page NFT launch front end titled "w-cub NFTs | LaunchMyNFT". It runs on a free subdomain of a developer hosting platform rather than on a branded domain. The page presents itself as a minting or launchpad storefront for a digital-collectible project, so its apparent purpose is to draw visitors into NFT minting or purchase activity.

Scam/Impersonation Risk

Contradictory signals are present. Several independent threat-intelligence engines currently flag the domain as malicious, and an external blacklist listing corroborates this. This is a confirmed blacklist condition, and it is the decisive factor in the assessment. No conflicting legal entities were found, so there is no identity contradiction. No brand impersonation was confirmed, and the phishing indicator comes from the blacklist signal rather than from observed page content. The domain name is a string of repeated letters with no relation to the "w-cub" or "LaunchMyNFT" branding on the page, and it closely resembles its parent hosting platform's domain. Both traits are common in disposable campaign sites. Page-level behavior was mixed. Wallet-connection, wallet-drainer, clipboard-hijack, hidden-form and cloaking tests were all negative. However, the page generated a heavy volume of external background requests, most of them to destinations outside the expected set. It also made several outbound POST submissions and logged repeated script errors. This pattern is consistent with third-party tracking or relay activity that the visitor cannot see. Whether it is benign is unresolved. The authoritative posture is cautionary. Evidence:

• Homepage: multiple threat-intelligence engines flag the domain as malicious, and an external blacklist listing corroborates them.
• Homepage behavioral testing: 30 external XHR/fetch calls (17 to non-whitelisted destinations), 6 external POSTs, and 18 console errors across 3 runs. No wallet-drainer, clipboard-hijack, hidden-form or cloaking behavior was detected.
• Domain registered 2026, approximately 7 days old (0.02 years). The web archive holds 1 snapshot, first and last seen 2026-10-14, spanning 1 year tracked.
• Homepage title and domain: the "w-cub NFTs | LaunchMyNFT" branding does not match the domain name, which closely resembles its parent hosting domain.

Regulatory Verification Notes

The page makes no licensing, registration or corporate-entity disclosure. Because it is an NFT launch front end, a visitor has no on-site way to establish who operates it or under which jurisdiction. The assessment was unable to connect the site to any real-world brand or person, so any claim of legitimacy would be unsupported. This is a verification gap and not proof of wrongdoing on its own. It carries weight here because the blacklist signals already point the same way. Third-party broker-reputation databases hold no matching record. That absence is neutral and gives no regulatory comfort. The technical foundation is ordinary and does not offset the reputational findings. The domain is very new, its history is thin, and the TLS certificate is a basic domain-validated one with no organizational vetting. Evidence:

• Homepage: no operator name, license number or registration reference appears in the captured page content.
• Hosting: served from AS13335 (Cloudflarenet, Cloudflare, Inc., US); registry ARIN.
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-01, with about 70 days remaining.
• Third-party broker database: no match found.

What to Verify Next

Do not sign, connect a wallet to, or pay through this site until its operator is independently identified. Confirm through the official channels of any NFT project the page claims to represent (its verified social profiles or an established marketplace listing) whether this exact address is actually endorsed. If no such endorsement can be found, treat the page as unaffiliated with that project. Also confirm the official support and contact channels through a route independent of this page. Any minting or payment contract the page references should be checked on a public blockchain explorer for deployer history, age and verified source code before any funds are committed. Evidence:

• Homepage: the NFT collection and launchpad branding is self-asserted and has no verifiable external link established in the evidence.
• Domain registered 2026 with a single archive capture, so no long operating history exists to anchor trust.
• Behavioral testing: undisclosed outbound requests mean the destinations receiving visitor data remain unidentified.

Summary Verdict

The overall posture is one of elevated risk. Active, corroborated threat detections define the assessment, and the absence of confirmed impersonation or credential-harvesting behavior does not neutralize them. The site is a newly created, unattributed property whose operator cannot be identified. Its apparent legitimacy is not supported by evidence, and any sensitive interaction should be treated as unsafe for now.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The true origin host is not observable, so the hosting arrangement cannot be independently verified. This also means page content could be swapped without a visible change in infrastructure. The platform's protections and a valid certificate are mitigating factors only. They cannot offset the active threat detections on this domain.

Closing Assessment

Limit any interaction to passive viewing. Do not log in, enter credentials, connect a wallet or make payments through this site. If the page was reached through a message, advertisement or social post, treat that source as suspect and verify the project through its independently confirmed channels instead.