---
title: "Is xpfunxyz.pages.dev a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "xpfunxyz.pages.dev"
verdict: "Critical Risk"
title: "Is xpfunxyz.pages.dev a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 45
canonical_url: https://trustsniffer.com/report/xpfunxyz.pages.dev
assessed: 2026-10-19
---

# Is xpfunxyz.pages.dev a scam? 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** xpfunxyz.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk

Assessed 2026-10-19 by automated analysis. Classification confidence 45%.

| Field | Value |
| --- | --- |
| What this site appears to be | A JavaScript-based decentralized application (xp.fun) presenting a token swap interface and list of recently created tokens. It prompts users to connect a wallet and perform swaps or token creation; many listed tokens are user-created and lack evidentiary metadata. This creates high economic risk for users transacting with unverified tokens. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |

## The page as captured


![Screenshot of the xpfunxyz.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/xpfunxyz.pages.dev/screenshots/first.png)

_What xpfunxyz.pages.dev served when TrustSniffer captured it on 2026-10-19. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Overview

This website is a JavaScript-driven decentralized token-swap application branded "xp.fun". It is served from a free subdomain on a developer hosting platform rather than from a dedicated domain. Its homepage shows a swap panel with slippage controls, liquidity, claim and rewards tabs, a "Connect" wallet button, a "Create Token" function, and a running list of recently created tokens. Its apparent business model is revenue from swap fees or spread and token-launch tooling, with all value moving through wallets that visitors connect themselves.


### Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. Several independent threat-intelligence engines flag the domain as malicious, and an external blacklist listing is confirmed. Infrastructure protections do not offset that reputational damage. No conflicting legal entities and no direct brand-impersonation finding were observed. The risk therefore rests on the blacklist and on the application's mechanics. The homepage invites visitors to connect a wallet and deposit funds before any service is delivered. The token list is dominated by anonymous, user-created tokens with joke or celebrity-style names such as "Bill Gates", "Windows 7", "XPEPE" and "XPDoge". Each token was minted only days earlier by a truncated wallet address, and none carries any metadata, audit, or issuer identity. This is the pattern in which low-cost token launches, liquidity traps and rug pulls occur, and the interface gives a user no way to tell a genuine token from a worthless one. The sandbox did not detect wallet-drainer behavior, clipboard hijacking, hidden forms or credential-harvesting forms across its runs. That is a mitigating observation, not a clearance, because the confirmed blacklist and the unverifiable value flow remain decisive. The page also relies heavily on third-party network calls, which limits how far its behavior can be audited from the front end alone. Evidence:

- Homepage: lists nine user-created tokens, all minted by anonymous wallet addresses roughly 154 to 169 hours before capture, with no descriptive metadata.
- Homepage: the swap, liquidity, claim and rewards interface requires a wallet connection and fund deposit before any service is rendered.
- Domain provenance: the domain is about 1.8 years old, with 6 archive snapshots spanning 2024–2026 (3 years tracked) and no content repurposing detected.
- Behavioral sandbox: 3 of 3 runs completed with no wallet-drainer, clipboard-hijack or hidden-form activity, and about 77 external data requests per session.

### Regulatory Verification Notes

The site publishes no legal, terms, privacy, or about page and names no operating company, registered address, or licensing authority. The only attribution is a footer line reading "Copyright 2024 XP.FUN Team", which identifies no legal person. A swap and token-launch service that handles user funds would ordinarily disclose at least its operator and jurisdiction. This is a disclosure gap, and the operator's identity and the project's governance remain unestablished. The gap is not in itself proof of fraud, but here it compounds the confirmed reputational findings. No regulatory registration is claimed, so nothing on the site can be checked against a registry. Evidence:

- Homepage footer: carries only a copyright line for an unnamed "team", with no entity name, address, or registration number.
- Site-wide: no terms, privacy, risk-disclosure, or contact pages were present in the captured content.
- Transport layer: the TLS certificate is issued by WE1 at domain-validated (DV) level, valid to 2027-01-08. DV confirms control of the domain only, not the operator's identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Any claim that this deployment is the official xp.fun service should be tested independently. The project's official domain and social accounts should be located through channels not linked from this page. The prospective user should then check whether those channels reference this exact subdomain. Any token considered for trading should be examined on a public block explorer for contract code, holder concentration, liquidity lock status, and creator history, before any wallet interaction. Support and contact channels should be confirmed through an independent route. Evidence:

- Homepage: the social-media and "how it works" links are the only identity pointers, and each should be validated from outside this site.
- Token list: each token is attributed only to a shortened creator wallet address, so contract-level checks are the only way to assess legitimacy.
- Domain: the site sits on a shared platform subdomain, so it cannot be tied to a registered brand domain by its address alone.

### Summary Verdict

The site carries elevated risk. A confirmed blacklist listing and corroborating threat-intelligence detections converge with an application model built around unverified tokens, wallet-based deposits, and an unidentified operator. The available evidence does not support treating this deployment as a trustworthy venue for financial activity.


### Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and the observed addresses are predominantly shared edge nodes, with a small number of possible origin candidates. This is a mitigating factor only. It shows ordinary professional-grade delivery and protection. It says nothing about the intent of the operator and does not offset the reputation findings.


### Closing Assessment

Interaction should be limited to passive viewing. No wallet should be connected, no funds deposited, and no tokens swapped, minted, or claimed from this deployment until its official status has been independently confirmed and the external blacklist listing has been lifted.


_Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, page content, several checks together.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Page content
- The review of the page content rated it high risk. (Page content `rule:PAGE_RISK_HIGH`)
- The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`)
- The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`)

### 03 Several checks together
- Several independent checks pointed to risk at the same time. (Several checks together `rule:HYB_MULTIPLE_MODULES_HIGH_RISK`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of xpfunxyz.pages.dev.

- The request stayed on xpfunxyz.pages.dev. It was not redirected to another domain. (Clear)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | Not available |
| Country | Not available |
| Server IP | 2606:4700:310c::ac42:2cbe |
| Name servers | Not available |
| CDN / edge network | Lookup incomplete |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-08 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not available |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about xpfunxyz.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [flying-fse.pages.dev](https://trustsniffer.com/report/flying-fse.pages.dev), a similar name (Critical Risk, 5/100)
- [scorpioncasino-portal.pages.dev](https://trustsniffer.com/report/scorpioncasino-portal.pages.dev), a similar name (Critical Risk, 2/100)
- [smart-connect-mainnet.pages.dev](https://trustsniffer.com/report/smart-connect-mainnet.pages.dev), a similar name (Critical Risk, 5/100)
- [dappsolana.pages.dev](https://trustsniffer.com/report/dappsolana.pages.dev), a similar name (Critical Risk, 5/100)
- [smartwebdevfix3.pages.dev](https://trustsniffer.com/report/smartwebdevfix3.pages.dev), a similar name (Critical Risk, 0/100)
- [uni-swap-live.pages.dev](https://trustsniffer.com/report/uni-swap-live.pages.dev), a similar name (Critical Risk, 0/100)
- [list-voteokx.pages.dev](https://trustsniffer.com/report/list-voteokx.pages.dev), a similar name (Critical Risk, 0/100)
- [igh4ughplwplpbpcryzyv4rg3-8g347934.pages.dev](https://trustsniffer.com/report/igh4ughplwplpbpcryzyv4rg3-8g347934.pages.dev), a similar name (Critical Risk, 15/100)
- [06tx1.com](https://trustsniffer.com/report/06tx1.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [06iis.com](https://trustsniffer.com/report/06iis.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/xpfunxyz.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/xpfunxyz.pages.dev · assessed 2026-10-19.*