Is Pages a scam? TrustSniffer's high-risk assessment of acapella-6o2.pages.dev: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a free application-hosting platform. A visitor who requests its homepage does not reach any business content. The visitor receives an access-blocked response (HTTP 403) carrying a security interstitial titled "Suspected Phishing", served at the edge of the hosting network. No product, service, brand or commercial purpose could be established from what the site presents, and its apparent function is undetermined.

Scam/Impersonation Risk

Active contradictions are present, and they warrant an explicitly cautionary reading. The site is blacklisted. Multiple independent security-vendor engines flag the domain as malicious, including several widely used enterprise-grade engines, and a smaller number additionally mark it as suspicious. The volume of malicious detections alone triggers a hard external block. The hosting network's own page response describes the site as suspected phishing, which independently corroborates the vendor detections. No conflicting legal entities were found, and no specific brand impersonation was captured, because the page content could not be read past the interstitial. The risk therefore rests on confirmed reputational listings rather than on a demonstrated lookalike. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms or credential forms posting to outside parties, and all third-party requests went to recognised services. The sandbox did record heavy outbound traffic: 55 background requests and 4 outbound posts to external hosts, with nearly all of the busiest page's traffic directed off-site. It also recorded repeated script errors and a large burst of page changes after interaction. These patterns are consistent with a script-driven page that hands content or flows to third parties. They are not proof of malicious intent, and they do not offset the detections. Evidence:

• Homepage: returned an access-blocked response with a "Suspected Phishing" interstitial from the hosting network.
• Reputation: 11 engines rated the domain malicious and 2 suspicious, including three tier-one security vendors.
• Behaviour: 55 external background requests, 4 external posts, 13 console errors, and 1,508 page mutations after interaction across 3 test runs.
• Provenance: domain registered in 2026 (~0.24 years old, about 86 days), with 1 archive snapshot spanning 2026 (1 year tracked).

Regulatory Verification Notes

No licence, registration number, company name or legal-identity page could be obtained, because the homepage is gated behind the warning interstitial. The site's real-world operator therefore cannot be connected to any brand or person, and no regulatory standing can be assumed. The site matches no entry in the broker-reputation dataset, so there is no third-party broker signal either way. The listings noted earlier are reputational findings. They are not a regulatory or legal determination. The technical posture shows a valid certificate but nothing that establishes institutional identity. Domain-validated certificates prove only control of the domain. Evidence:

• Homepage and legal pages: no operator name, licence or registration detail was retrievable behind the interstitial.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-23.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

The decisive check is whether the listings have been cleared. Re-check the domain's status with the major security vendors, and with the hosting platform's abuse process, before any further engagement. If the domain was reached through a message, advertisement or referral, confirm independently through a known, offline channel that the sender actually published that address. Any claim of affiliation with a financial or commercial brand should be checked directly with that brand through its official website, not through links on this domain. Official support and contact channels should be established the same way. Evidence:

• Reputation: at least 11 active malicious detections, so a clean re-scan is the minimum bar for reassessment.
• Registration: the domain is only weeks old, so no long-standing operator track record exists to rely on.

Summary Verdict

The site sits in the critical-risk band. Confirmed threat-intelligence listings are decisive, and nothing in the available evidence offsets them. Its identity is unverified, and it has no established history that could support a presumption of legitimacy. Its posture is that of a high-risk, likely malicious or compromised destination.

Infrastructure Integrity

The site is delivered through Cloudflare's content-delivery and web-application-firewall network. All four observed addresses are CDN edge addresses, and the origin server could not be observed. This is a standard, reputable setup. It lowers exposure to denial-of-service and scraping, and it explains the bot-challenge behaviour seen during testing. It is a mitigating factor only. Edge-only visibility prevents independent confirmation of where the content actually runs, and it cannot offset the reputation findings.

Closing Assessment

Read-only exposure, such as viewing the warning page from an isolated environment, is the outer limit of appropriate interaction. Logging in, entering credentials, connecting a wallet, making payments or downloading files from this domain should be avoided. Anyone who has already interacted with it should treat any shared credentials as exposed and change them. Staff handling the domain, whether a security team or a platform operator, should consider blocking it until its listings are cleared.