Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
yesmft-whitelisting.pages.dev shows high-risk / scam indicators.
| What this site appears to be | A token launch page for 'YES' (MFT) that promotes a whitelist and a Buy action, describes a token/NFT swap wrapper, and reports a burn from 100,000 to 85,000 supply, without verifiable audit, legal identity, or contact evidence. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2.5 years oldRegistered history | Clear |
| Web archive | Archived since 202426 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page token launch site for a newly issued crypto asset named "YES" (symbol YES), billed as "the second MFT with a twist" and "inspired by NPC". It shows a "Get Whitelisted!!!" call to action, a "Buy" button, and a short explainer saying an "MFT" is both a token and an NFT that can be swapped back and forth. Its apparent business model is selling the token to visitors. It describes no product, utility or service, and the only value drivers it cites are a whitelist and a supply burn.
Scam/Impersonation Risk
The site is flagged by external reputation sources. A confirmed blacklist hit is present, and it is the decisive contradiction. No conflicting legal identities and no brand impersonation were observed, and the page has no login or payment form or wallet-connection prompt. Several independent signals agree with the reputation hit. The homepage uses high-pressure framing ("Get Whitelisted!!!", "Buy") under the heading "A Shift in Retail Investment Mechanics in Crypto". It supports that framing only with a claimed burn: supply is said to fall from 100,000 to 85,000 tokens because 15,000 were "sent to the wrapper at launch" and "can no longer be retrieved". The page invites visitors to inspect a burn transaction, but it names no contract address, audit, team or tokenomics. The token-to-NFT "wrapper" is described only as a swap back and forth, with no explanation of who controls the wrapper or where purchase proceeds go. Content analysis rates the page as critically risky, and the weighted red flags are claims unsupported by evidence, an unverifiable legal status, an unverifiable contact or address, opaque value flow and no clear product. The site is also hosted on a free shared-subdomain platform, so the address carries no brand investment. This pattern, a brand-new token with scarcity and whitelist urgency and no accountable party, is the standard profile of a speculative launch that can be abandoned at will. Evidence:
- Homepage: "Get Whitelisted!!!" and "Buy" calls to action, with no contract address, audit or team information.
- Homepage: the burn is described as 15,000 tokens "sent to the wrapper" that cannot be retrieved, which gives no verifiable proof of reduced supply or of who holds the wrapper.
- Domain provenance: first observed in January 2024 (~2.5 years old), with 26 archive snapshots spanning 2024–2026 (3 years tracked), so the site is not a very recent registration.
- Reputation: an external reputation check reports one malicious and one suspicious detection, and the site is also treated as blacklisted.
Regulatory Verification Notes
The site presents no licence, registration number, legal entity, jurisdiction, terms page or privacy policy. It names no operator, and the ownership details behind the domain are incomplete. Because the offering is an investment-style sale of a token to retail buyers, this leaves no accountable party to whom a buyer could turn for redress. These are disclosure gaps and are not proof of wrongdoing on their own, but they sit alongside the confirmed reputation hit. No third-party broker or regulator listing matched the site. The site's identity is therefore unverified and cannot be tied to any real-world person or company. The transport-encryption certificate and hosting identifiers below show only that the site is technically operational. They say nothing about who runs it. Evidence:
- Homepage: no licence, registration number, company name, address or legal pages are published.
- Third-party check: no match in any broker or regulatory reputation dataset.
- Hosting: served from AS13335 (Cloudflare, US).
- Encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-02. This level of validation confirms control of the domain but not the identity of the operator.
What to Verify Next
Any reader still considering an interaction should first ask the promoters to identify the legal entity and individuals behind the project. They should then confirm independently, through a public blockchain explorer, that a token contract exists. That check should cover the contract's ownership and mint permissions, the holder concentration, and whether the claimed burn transaction actually exists and matches the 15,000-token figure. A genuine audit by a named security firm should be located through that firm's own published reports, not through links on the site. The "wrapper" swap should be understood in full before any asset is committed, including who can pause, upgrade or drain it. Any official support or contact channel should be confirmed through an independent route and not through the site itself. Evidence:
- Homepage: the wrapper is described only in one sentence, with no documentation of its permissions or custody.
- Homepage: the page offers a burn transaction view but no contract address, audit report or roadmap.
- Page analysis: the content shows an unverifiable legal status and an unverifiable contact or address.
Summary Verdict
The overall posture is clearly cautionary. The site is a high-risk speculative token launch that has been flagged by external reputation sources and has no verifiable accountable operator. Its working technical setup does not offset that profile. Its identity and legitimacy remain unverified, and the available evidence does not support treating it as trustworthy.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and web application firewall, and every observed address is a CDN edge server. The origin server is not observable, so hosting cannot be independently verified. Content can also be swapped quickly behind the edge without any visible change in infrastructure. The protective infrastructure and the valid transport encryption are mitigating factors. They do not offset the external threat detections or the unverifiable operator. They show only that the page is served reliably.
Closing Assessment
This site should be treated as unsafe for any login, credential entry, wallet connection or financial transaction. Reading the page for information is the only reasonable use. A token purchase should not be considered unless the project's identity, contract and independent audit are established through sources outside the site.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of yesmft-whitelisting.pages.dev.
- The request stayed on yesmft-whitelisting.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2024-01-31. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c36 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-02 |
| Domain age | 2.55 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-01-31 |
| Archive snapshots | 26 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about yesmft-whitelisting.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.