Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
xcommunityrewards.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page landing site on a free Cloudflare Pages subdomain. It carries the title "Solana Airdrop — Enter Token Contract" and a very short block of text, under 400 characters. The name "xcommunityrewards" suggests a community rewards program on X. The page invites visitors to enter a token contract as a condition of claiming a Solana airdrop. Its apparent purpose is to collect a visitor's token or wallet details under the promise of free tokens, which is a common crypto-giveaway lure.
Scam/Impersonation Risk
Contradictory signals are present and are the decisive element of this assessment. Several independent threat-intelligence engines classify the site as malicious or suspicious, and the site is blacklisted by external reputation sources. Those sources also associate the domain with known phishing activity. The page mechanics fit that picture. The homepage offers an unverifiable free-token "airdrop", names no project, token, or issuer, and asks the visitor to supply a token contract as the first and only action. Sites of this kind typically lead to a wallet-connection or approval prompt that can drain assets. No brand impersonation or conflicting legal identities were established, but the reputation evidence alone puts the site in a high-risk posture. In the automated browsing sessions the page made no outbound data transmissions, wallet-connection attempts, or clipboard manipulation. That absence on the landing page does not reduce the risk, because a lure page can stay inert until a visitor takes the next step. Evidence:
- Homepage: titled as a Solana airdrop and prompts for a token contract, with no named project, issuer, terms, or claim rules.
- External reputation: multiple threat-intelligence engines flag the domain as malicious or suspicious, and it is listed on an external blacklist.
- Homepage behaviour: three sandbox sessions, all completed, recorded no external requests, wallet-provider calls, or clipboard writes.
Regulatory Verification Notes
The captured homepage contains no legal entity name, company registration, licensing statement, terms of service, privacy policy, or contact details. The operator cannot be linked to any real-world organisation or person from the site itself. The domain is a subdomain of a shared hosting platform, so it carries no independent registration history of its own. No third-party broker or regulator record matched the site. The site solicits token-related interactions without any visible regulatory standing, so nothing offsets the reputation findings. Evidence:
- Homepage: no operator name, registration number, jurisdiction, or licensing information is shown.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2026-12-07. DV certification confirms control of the domain only, not the identity of the operator.
What to Verify Next
Any claim of a Solana airdrop should be checked against the official channels of the project it purports to represent. These are the project's verified social accounts and its documentation, reached by typing the address manually rather than following a link. A legitimate airdrop does not require a visitor to submit a token contract on an anonymous, free-hosted page. Any wallet that has already interacted with this site should have its token approvals reviewed and revoked. Any official support or contact channel that the site claims should be confirmed through an independent route. Evidence:
- Homepage: the airdrop is not attributed to any named project, so its legitimacy cannot be confirmed from the site.
- Hosting model: the site sits on a shared platform subdomain rather than a branded, independently registered domain.
- External reputation: the adverse threat-intelligence findings are current and unresolved.
Summary Verdict
The available evidence places this website in an elevated-risk, clearly cautionary category. Adverse external reputation findings and the nature of the airdrop lure converge, and the technical hygiene is basic and carries no weight against them. The operator's real-world identity is unverified, and nothing supports treating the site as legitimate.
Infrastructure Integrity
The site is delivered through a mainstream CDN and WAF provider, and all observed addresses are edge servers. This points to a standard hosting arrangement and is a mild mitigating factor. Edge-only visibility means the underlying host cannot be independently checked, and content can be changed quickly behind the edge. Protective infrastructure is not evidence of legitimacy and does not offset the reputation findings.
Closing Assessment
The site should not be used for login, wallet connection, token-contract submission, or any financial interaction. Any further access should be limited to passive viewing. Anyone who has already engaged with it should treat their wallet as potentially exposed and revoke its approvals promptly.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of xcommunityrewards.pages.dev.
- The request stayed on xcommunityrewards.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2fad |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-07 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about xcommunityrewards.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.