Is Pages a scam? TrustSniffer's high-risk assessment of amlbot74838.pages.dev: 24/100

Overview

This website presents itself as "AMLBot Pro: Advanced Blockchain Analytics for AML & Compliance Teams", a blockchain-analytics and compliance-screening service. It is served from a free, shared subdomain on a developer-hosting platform, not from a branded corporate domain. Its apparent purpose is to attract compliance and anti-money-laundering professionals to a crypto-risk-analysis product, and any commercial model behind it is not evident from the available material.

Scam/Impersonation Risk

This is the dominant concern. The site is blacklisted: several independent threat-intelligence engines currently flag it as malicious or suspicious. Reputation coverage was complete, so the detections are corroborated and not an artifact of partial data. The product name and positioning borrow the vocabulary of an established compliance-analytics offering, yet the site sits on a disposable, platform-issued subdomain, and nothing independently ties it to the real-world brand it evokes. That mismatch fits a lookalike or lure site aimed at compliance staff, who are a high-value audience for credential and data harvesting. Hard identity contradictions (two or more conflicting legal entities) were not observed, and brand impersonation is not confirmed on the evidence available. The risk comes from the convergence of confirmed adverse reputation, a borrowed-sounding professional identity, and the lack of any verifiable operator. Sandbox behaviour adds to this. The homepage generated heavy outbound POST traffic to third-party destinations, some of them outside recognised, well-known services, and produced a very high volume of script errors. Both are consistent with unstable or poorly controlled page code, though neither alone proves malicious intent. Evidence:

• Homepage: security engines recorded 3 malicious and 1 suspicious detections, and the external reputation check confirmed a blacklist hit.
• Homepage behaviour across 3 sandbox runs: 26 external POST requests, 6 of them to non-whitelisted destinations, and 128 console errors.
• Domain provenance: about 1.5 years old, with 4 archive snapshots spanning 2025–2026 (2 years tracked), which is a thin history for a service claiming professional compliance standing.

Regulatory Verification Notes

The site shows no licensing, registration, or regulated-entity status that could be matched to any registry, and no third-party regulatory source corroborates it. Operator and ownership details are opaque, and no accountable legal entity is identified, which is a material gap for a service aimed at regulated compliance teams. This is a transparency shortfall, not an accusation, but it removes any basis for mitigating the adverse reputation signals. No broker-reputation dataset matched the site, so there is no external context in either direction. The technical hygiene is ordinary and does not offset the concerns above: a valid domain-validated certificate and a mainstream network provider are baseline conditions that fraudulent sites routinely meet as well. Evidence:

• Homepage: no company name, licence, or registration number is disclosed.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-25 (56 days remaining), which confirms encryption but not identity.
• Hosting: served from AS13335 (CLOUDFLARENET, US).

What to Verify Next

Any contact with this site should first be tested against the legitimate vendor. Confirm the official domain of the genuine analytics provider through an independent route, such as a known corporate registry entry, an established directory, or a previously trusted communication, and compare it with this address. Request the operator's legal entity name and any regulatory registrations through that independent channel, and check them with the issuing registry directly. Official support and contact channels should likewise be confirmed offline, not through links on this site. Evidence:

• Homepage: the product title implies an established brand, but the hosting address is a shared platform subdomain.
• Site-wide: no operator identity is published that could be checked against a registry.

Summary Verdict

The overall posture is high-risk. Confirmed adverse reputation from several independent sources, combined with an unverifiable operator, a borrowed-sounding professional identity, and irregular page behaviour, outweighs the site's technically routine features. Nothing in the evidence supports treating it as a legitimate service.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host could not be independently seen. This is a mitigating factor for transport reliability and denial-of-service resilience only. It also prevents independent hosting verification and allows content to change quickly without any visible change in addressing. It does not offset the reputation findings.

Closing Assessment

Treat the site as read-only at most. Do not enter credentials, submit compliance or customer data, connect wallets, or make payments. Anyone seeking the genuine service should navigate to it through an independently confirmed official address, not through this one.