Is fattypresale.pages.dev safe? TrustSniffer's low-trust assessment: 35/100

Overview

This is a single-page website hosted as a subdomain on a shared web-publishing platform. It is titled "Fatty Presale Recovery Hub" and presents only a few words of text. The title implies a recovery or remediation service tied to a cryptocurrency token presale, but the page describes no product, operator, or process. Its apparent purpose is to act as a landing page for a presale-related recovery offer, a framing commonly used to approach people who have already lost money.

Scam/Impersonation Risk

This is the decisive area. Threat-intelligence sources currently flag the site, and it is blacklisted by external reputation sources. Several detection engines rate it malicious and others rate it suspicious, so the reputation concern comes from independent sources. The page content gives no mitigating context, because it has no stated purpose or named operator. The "presale recovery" framing fits a recognised fraud pattern in which victims of failed token launches are targeted a second time with promises of fund recovery, usually followed by requests for fees, wallet access, or personal data. That is an inference from the title and the reputation flags. The page does not itself state any of these demands. No conflicting legal identities or brand impersonation were observed, and the sandbox found no wallet-connection prompts, clipboard manipulation, hidden forms, or credential posts to external hosts. Those clean behavioural results do not offset the external detections, because a page this thin could be switched to a malicious payload without notice. Evidence:

• Homepage: the only content is a short title and a few words of text, with no description of services, fees, or recovery methodology.
• Homepage title: "Fatty Presale Recovery Hub" invites visitors who believe they lost funds in a token presale.
• Reputation checks: two engines rated the site malicious and two suspicious, and an additional external blacklist match was recorded.
• Behavioural sandbox: three successful runs recorded no external requests, no wallet interaction, and no hidden forms.

Regulatory Verification Notes

The homepage names no legal entity and no registration or licence number. It gives no jurisdiction, terms, privacy policy, or complaint route. This is a content gap on the site itself. A service that offers to recover funds in a financial context would be expected to disclose these basics. The site sits on a subdomain of a shared hosting platform, so it has no standalone domain identity that could anchor an operator. The site's connection to any real-world person or organisation remains unestablished. Third-party broker-reputation databases hold no entry for it, which means there is neither a positive nor a negative regulatory signal. The site carries a valid but low-assurance encryption certificate. That certificate shows only that traffic is encrypted, not who runs the site. Evidence:

• Homepage: no company name, address, licence, or registration identifier is shown.
• Site hosting: served from AS13335 (Cloudflare) as a subdomain of a shared publishing platform.
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-16.
• Broker-reputation lookup: no match for the site.

What to Verify Next

Anyone who has been approached by this site should first ask where the contact originated. Unsolicited outreach offering to recover presale losses should be treated as unconfirmed. A real recovery service would be identifiable through a registered legal entity and a regulator's public register, and this should be checked directly with the competent authority. Claims of an affiliation with the original presale project should be checked through that project's official channels, reached independently and not through anything on this page. Official support and contact routes should be confirmed offline or through trusted channels before any information is shared. Anyone who has already interacted with the site should review wallet approvals and revoke any that were granted. Evidence:

• Homepage: no identifying details are provided that could be checked against a registry.
• Homepage title: the presale-recovery framing makes the original project's official channels the correct place to confirm any affiliation.
• Reputation checks: the active threat flags support treating any prior interaction as potentially compromising.

Summary Verdict

The site carries an elevated risk posture and is not suitable for sensitive interaction. Active external threat detections are the decisive factor, and no other part of the evidence outweighs them. Technical hygiene such as valid encryption and quiet behaviour is routine and does not make up for the missing identity, the absent content, and the reputation flags.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge node. The origin server was not observable. This arrangement is a mild mitigating factor, because the infrastructure is reputable and reports no abuse history. It does not vouch for the site's content or operator. Edge-only visibility also prevents independent verification of where the content is hosted and could conceal a rapid change of content.

Closing Assessment

The site should be limited to passive viewing at most. Credentials, wallet connections, personal data, and payments should not be submitted, and no files should be downloaded from it. Anyone seeking help with a failed presale should use only regulator-listed or officially announced recovery channels.