Is allocation-orbiterfinance.pages.dev safe? TrustSniffer's low-trust assessment: 50/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a Cloudflare Pages-hosted subdomain with a name that evokes a token-allocation or finance offering tied to the Orbiter Finance name. The only content a visitor receives is a short interstitial page that labels the site as suspected phishing. It offers no products, company description or navigable business content. Its apparent purpose is to present a finance-themed destination, most plausibly a crypto allocation or claim page, on a free shared hosting subdomain rather than a branded domain.

Scam/Impersonation Risk

Contradictory signals are present and material. Several independent reputation engines currently flag the site as malicious, including a major network-security vendor, and the aggregate result amounts to a confirmed blacklist listing. The page a visitor receives is an interstitial that describes the site as suspected phishing, which corroborates the listing. The domain name pairs "allocation" with a known DeFi bridge brand on a free shared subdomain, a pattern commonly used to lure users into fake token-claim or airdrop flows. No on-page evidence confirms impersonation of that brand, so the name is a risk indicator, not a proven impersonation. Browser-behaviour testing observed no wallet-connection prompts, clipboard tampering, hidden forms or credential posts to unrecognised destinations. That observation does not offset the reputation findings, because the content actually served was only the interstitial. The domain is also young, with thin archive coverage, so there is no long record of benign operation to weigh against the flags. No conflicting legal-entity names were found. Evidence:

• Homepage: the captured page returned an access-blocked interstitial titled as suspected phishing, with only a few hundred characters of text.
• External reputation: three engines returned malicious verdicts and one returned suspicious, including a tier-one network-security vendor.
• Domain provenance: registered about 1.8 years ago (~668 days); 8 archive snapshots spanning 2024-12-27 to 2025-02-25 (2 calendar years touched, with no archived business content).
• Behaviour testing (3 runs): 19 external XHR calls and 5 external POSTs, all to recognised destinations, with 16 console errors and a high share of traffic going to third-party hosts.

Regulatory Verification Notes

No legal, identity, licensing or registration pages are presented to a visitor, because the only content served is the interstitial. No regulated-entity status could be established from any independent source, and no third-party broker record matched this site. The registrant details are incomplete, which is ownership opacity, not an identity contradiction. The site runs on a platform-provided subdomain, so no separately registered brand domain ties it to any operator. This section does not by itself indicate fraud. The convergence with the reputation findings above is what sets the risk level. Evidence:

• Homepage: no company name, license number, terms, privacy policy or contact page is presented.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2027-01-06. Domain-validated encryption confirms only domain control, not operator identity.
• Registration: ownership details are incomplete, and the platform subdomain provides no standalone registrant identity.

What to Verify Next

Any independent evidence of a legitimate operator must come from outside this site. The official Orbiter Finance channels should be consulted directly to confirm whether any allocation, claim or distribution program exists, and whether it uses this address. Any link that led here should be traced back to its source, such as a social post, direct message or advertisement, and treated as untrusted until that source is authenticated. Official support channels should be confirmed through an independent, offline route. Browsing should stay passive, with no wallet connection or transaction signing, until a security team has re-tested the site after the listing is cleared or explained. Evidence:

• Domain naming: the subdomain combines an "allocation" term with a recognisable DeFi brand name under a shared hosting suffix.
• Reputation: the current malicious listings should be re-checked with the issuing vendors for status changes.
• Homepage: no program details, token contract addresses or official documentation links are offered for cross-checking.

Summary Verdict

The site carries an elevated risk posture. Confirmed adverse third-party detections, a young domain, and the absence of any verifiable operator or business content outweigh the technical hygiene present. Its legitimacy is unsupported and its identity is unverified.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host is not visible. Bot-challenge protection was active during testing, and the transport certificate is valid and issued by a recognised authority. These controls are mitigating factors only. They show that the hosting is competently configured, not that the operator is legitimate, and they cannot offset the external threat detections.

Closing Assessment

Login, credential entry, wallet connection and any financial interaction should be avoided. Any use should be limited to passive, read-only viewing from an isolated environment. Anyone who has already interacted with the site should rotate affected credentials and review wallet approvals.