Is Pages a scam? TrustSniffer's high-risk assessment of burnt-shiba.pages.dev: 25/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a project hosted on a free Cloudflare Pages subdomain under the name "burnt-shiba". The name alone evokes crypto meme-token branding. A visitor could not be served its real content during analysis. Automated access was met with a bot-challenge page titled "Suspected Phishing", and only a short fragment of text was captured. No products, claims or business model can be confirmed from the page itself, so its apparent purpose remains unestablished.

Scam/Impersonation Risk

The site is clearly cautionary on reputation grounds. A confirmed external blacklist listing exists, and several independent security engines classify the domain as malicious or suspicious. At least one tier-one security vendor is among them. A historical web-archive record independently carries a known-phishing indicator. The warning interstitial returned on the homepage matches those listings. No brand impersonation or conflicting legal identities were observed, so the contradictions come from reputation listings, not from page content. Behavioral testing observed no wallet-drainer activity, clipboard hijacking, hidden forms or credential posts to external hosts. That is mildly mitigating but does not offset the listings. The same testing showed a very heavy reliance on third-party requests, repeated console errors, and large DOM mutations after interaction. That pattern is consistent with a dynamic application whose content cannot be inspected statically. Evidence:

• Homepage: capture returned HTTP 403 with a "Suspected Phishing" challenge title and only 381 characters of text.
• Homepage behavioral runs: 3 of 3 completed, with 53 external XHR/fetch calls, 18 console errors and up to 1,508 DOM mutations after interaction. None of the external destinations fell outside the known-service allowlist.
• Domain provenance: registration continuity of about 2.2 years, with 13 archive snapshots spanning 2024–2026 (3 years tracked).
• External reputation: a confirmed blacklist hit and a tier-one vendor detection. The archive record also carries a phishing flag.

Regulatory Verification Notes

No legal, terms, privacy, about or licensing page could be captured, so the site's own disclosures could not be assessed and its on-page disclosure state is unclear. No operator, legal entity or registration number is identified. The evidence shows both ownership opacity and governance opacity. These are transparency limitations in their own right and are separate from the reputation findings above. No third-party broker-reputation record matched this domain. That absence is neither an endorsement nor a regulatory verdict. Nothing links the site to a real-world brand or person, so its legitimacy cannot be treated as established. Evidence:

• Homepage: no legal-entity name, licence reference or regulator mention was available in the captured content.
• Hosting: served from AS13335 (Cloudflare, Inc., US, ARIN registry).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-29 with about 60 days remaining. A DV certificate confirms domain control, not operator identity.

What to Verify Next

Do not enter credentials, connect a wallet, or transfer funds on this site. If a project is promoting this address, obtain its official link from an independent, long-standing source, such as an established listing or the team's verified channels, and compare it with this one. Re-check the domain's current standing with the major security vendors, since a listing on a shared-platform subdomain can change if the content is removed or cleaned. If the site later presents regulated financial products, confirm the claimed licence directly with the relevant regulator's public registry. Evidence:

• Homepage: the platform-level phishing warning is the most recent visible indicator and should be re-tested.
• External listings: the blacklist and malicious detections are the items to confirm as cleared or still active.
• Legal pages: none were captured, so no on-site claim can yet be tested against a registry.

Summary Verdict

The overall posture is high-risk. Convergent third-party blacklisting, multiple malicious detections and a platform-issued phishing warning outweigh the technically sound transport security and the absence of observed drainer behavior. Operator identity is unverified, so the site gains no benefit of the doubt.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are provider edge nodes. Bot protection challenged the automated visits. The origin server is not observable, which prevents independent verification of the underlying hosting. This protective layer is only a mitigating factor. It does not establish legitimacy and cannot offset the reputation risk.

Closing Assessment

Treat the site as unsafe for any login, credential entry, wallet connection or financial activity. At most, view it passively from a hardened, isolated browser. Reconsider only if the external listings are lifted and the operator is independently identified.