Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
al-5mq.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.9 years oldRegistered history | Clear |
| Web archive | Archived since 20243 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website is a small project site served from a shared, free-tier Cloudflare Pages subdomain. It carries no recognizable brand, named operator, or described product or service in the material reviewed, so its commercial purpose is unclear. It reads as a disposable or experimental web property rather than an established business presence.
Scam/Impersonation Risk
This site shows a confirmed contradiction. It appears on an external blacklist, and that listing is decisive for the posture. It is corroborated by the reputation checks, where one detection engine rates the site malicious and two rate it suspicious. The listing is an external reputation finding. No impersonation of a known brand, no conflicting legal identities, and no phishing confirmation were observed, and no contact-channel anomaly was found. The site's runtime behavior adds concern. During sandboxed visits, the pages sent several background requests and form-style submissions to third-party destinations outside the site's own infrastructure, and most observed external traffic went to destinations that are not recognized, mainstream services. Wallet-connection prompts, clipboard tampering, hidden forms, cloaking, and credential posts to outside hosts were not observed. A young domain with this reputation record and this outbound data flow is a poor basis for any sensitive interaction. It supports a clearly cautionary stance, but it does not establish who is operating the site or why. Evidence:
- Homepage and site-wide reputation: the site is listed on an external blacklist, and the detection engines split one malicious and two suspicious.
- Homepage behavior: three outbound background requests and three outbound submissions went to non-whitelisted third-party destinations across three sandbox runs, with two console errors logged.
- Domain provenance: the domain was registered in 2024 (about 1.9 years old).
- Archive history: 3 archive snapshots span 2024-12-16 to 2024-12-18, covering a single tracked year and a very thin history.
Regulatory Verification Notes
No licensing, registration number, or regulated-entity status was identified for this site, and no third-party broker or regulator record matched it. The operator's real-world identity could not be independently connected to a legal entity, and on-page disclosure remains unclear. These are verification gaps, not proof of wrongdoing. They matter because the adverse reputation record leaves no offsetting evidence of accountability. The site gives a visitor no recourse path, such as a named company, a jurisdiction, or a complaints channel. The shared hosting subdomain also means the site has no independently registered domain of its own to anchor an organizational identity. Evidence:
- Legal and identity pages: no named legal entity, license, or registration number was found in the material reviewed, and no regulated-entity match exists in third-party records.
- Transport security: the TLS certificate is domain-validated only (DV), issued by WE1, and valid to 2026-12-25. This confirms encryption, not operator identity.
- Hosting: the site is served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
A prospective user should first confirm through an independent route whether any real organization claims this site, for example by looking for the organization's official domain through an established search or registry channel instead of through this site. Any claim of licensing or registration should be checked directly with the relevant regulator's public register. Official support and contact channels should be confirmed offline or through an independent source before any dealings. The blacklist entry should be re-checked later, since a listing can be cleared once a site is remediated or can persist if it is not. Evidence:
- Reputation: the external listing and the mixed engine verdicts should be re-queried at a later date to see whether they have changed.
- Identity: the site's own pages do not name an operator that can be looked up in a registry.
- Behavior: the third-party request destinations seen in the sandbox should be reviewed before any form on the site is used.
Summary Verdict
The overall posture is high-risk. A confirmed external blacklist entry, combined with a young domain, a thin history, and unverified operator identity, outweighs the technical hygiene the site displays. The evidence supports caution toward any sensitive engagement, but it does not support a finding of confirmed impersonation or phishing.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN and WAF, and every observed address belongs to Cloudflare edge servers, with the origin server not exposed. Cloudflare is a mainstream, reputable provider, and the certificate and network records are clean and consistent. This is a mitigating factor only. Edge-only visibility prevents independent verification of the real hosting and allows content to be swapped quickly. Protective infrastructure therefore cannot offset the reputation risk and is no proof of legitimacy.
Closing Assessment
Treat the site as read-only at most. Do not enter credentials, sign in, or make payments or financial commitments on it until its reputation listing is cleared and an accountable operator is independently established.
Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of al-5mq.pages.dev.
- The earliest public archive of this site is from 2024-12-16. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c4c |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-25 |
| Domain age | 1.86 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-12-16 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about al-5mq.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.