Is almanak-tges.pages.dev safe? TrustSniffer's moderate-trust assessment: 57/100

Overview

This website is a newly published single-entry web property, hosted as a subdomain on a shared developer-hosting platform. Its homepage carries the title "Almanak – Maximal Yield, Minimal Work". The page presents a yield-oriented financial proposition that promises high returns with little user effort, apparently to attract visitors who want passive income. The captured page offers only a short body of text, and nothing in it names an operating company or identifies a responsible individual.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is cautionary. Several independent threat-intelligence sources currently flag the site as malicious, and the site is blacklisted by external reputation sources. No conflicting legal identities and no brand-impersonation pattern were observed, so the concern comes from the reputation detections and the site's age. The domain is days old, and the only archive capture is the one made at first observation. The domain therefore has no history that could offset the detections. The slogan "Maximal Yield, Minimal Work" is an unverifiable return promise of the kind that fraudulent investment schemes commonly use. On a new, anonymous page that promise needs independent substantiation before it carries any weight. Behavioral testing was less alarming. It recorded no wallet-draining routines, no clipboard manipulation, no hidden or external password forms, and no cloaking. It did record heavy background traffic to third-party destinations, with some going to unrecognized hosts, and repeated browser console errors on the homepage. That pattern is consistent with an unfinished or hastily assembled page, but it does not by itself indicate malicious intent. Evidence:

• Homepage: external threat-intelligence reputation sources return malicious detections, and the site is blacklisted.
• Domain provenance: the domain is about 7 days old, with 1 archive snapshot, first and last seen 2026-10-14 (1 year tracked).
• Homepage behavior: 15 external background requests, 3 to non-whitelisted destinations, and 9 console errors across 3 successful test runs.
• Homepage claim: the "Maximal Yield, Minimal Work" title is the only return promise captured, and the site offers no substantiation for it.

Regulatory Verification Notes

The captured homepage names no operating entity and cites no licence or registration. It also gives no governance information, and no third-party regulatory source confirms any authorization. Because the site markets a yield proposition, that absence matters. This is a disclosure gap and not proof of wrongdoing, but here it sits alongside the reputation detections. The site also has no independent record of the kind a long-established financial operator would have, and it is not recognized in any DeFi protocol directory, so it shows no recorded locked value. Any claim of authorization or backing therefore rests on unverified on-site statements only. Evidence:

• Homepage: no company name, licence number, registration reference, or governance disclosure appears in the captured content.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1, domain-validated (DV), valid to 2026-12-03. Domain validation confirms only control of the domain, not the operator's identity.
• DeFi directory: no protocol listing and no TVL on record.

What to Verify Next

The operator's identity and authorization should be established independently of the site. Any regulator, licence, or entity the site names should be checked in the official public register of the relevant jurisdiction, using contact details sourced from that register. The yield promise should be tested against a clear, documented product description, including how returns are generated and who holds user funds. Official social profiles and support channels should be confirmed through an independent route, and the claimed project should be checked against its established public presence. Any third-party reviews should be treated as unverified until they trace to credible sources. Evidence:

• Homepage: the yield promise comes with no accompanying product, custody, or risk documentation.
• Site-wide: no named entity is available to check against a regulatory register.
• Domain provenance: the domain has no multi-year public record to cross-reference.

Summary Verdict

The available evidence supports a clearly cautionary posture. Multiple external reputation detections combine with a very new domain, no verifiable operator, and an unsubstantiated high-return promise. A technically orderly delivery setup and a working TLS certificate are present, but they are outweighed by the threat-intelligence detections and the site's lack of history. The site cannot be treated as established or apparently legitimate on current evidence.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web-application-firewall layer. All four observed addresses (IPv4 and IPv6) are Cloudflare edge servers in the United States, and the origin server was not observable. This is a mitigating factor only. Protective infrastructure is available to any customer, so it says nothing about who operates the site. It also limits independent verification of where the content is actually hosted. It cannot offset the reputation detections.

Closing Assessment

Interaction should be limited to passive viewing. No account login, credential entry, wallet connection, deposit, or other financial transaction should take place until the operator is independently identified and the external detections are cleared.