Is fgfggreerferf.pages.dev a scam? TrustSniffer's high-risk assessment: 15/100

Overview

This website is an anonymous, auto-style subdomain on a free application-hosting platform (Cloudflare Pages). Its label is a random keystroke string with no recognizable brand, product, or organization. When visited, the homepage returned only a short platform-issued interstitial titled as a suspected-phishing warning, not an ordinary business page. No products, services, or commercial purpose could be identified, and its apparent role is that of a disposable, unbranded landing host.

Scam/Impersonation Risk

The principal concern is a confirmed adverse reputation. The domain is currently flagged by external threat-intelligence reputation sources, and the homepage was replaced with a phishing-suspicion warning when visited. The site is therefore blacklisted, and this is the decisive negative signal. No brand impersonation and no conflicting legal identities were observed. The site shows no brand or entity at all, so no such comparison was possible. Behavioral testing adds supporting context. Nearly all of the page's network activity went to third-party destinations, and several outbound data submissions were made. Page rendering produced many console errors and very large automated DOM rewrites after interaction. Testing did not detect wallet-connection prompts, clipboard tampering, hidden forms, or credentials posted to external hosts. Taken together, the site is consistent with a throwaway deployment of a type commonly used for credential-harvesting or redirect staging, but the available evidence does not prove what content it ultimately serves. Evidence:

• Homepage: the page served carried a title identifying it as a suspected phishing site, with only a very short body of text.
• External reputation: one reputation source rated the domain malicious and two rated it suspicious, producing an active blacklist hit.
• Homepage behavior: 86 external fetch/XHR requests, 4 external POSTs, 12 console errors, and 1,508 DOM mutations after interaction were recorded across 3 successful runs.
• Homepage behavior: no wallet-connection, clipboard-write, hidden-form, or external password-form activity was detected.

Regulatory Verification Notes

No legal, terms, privacy, about, or contact pages were reachable, because the only content observed was the warning interstitial. There is therefore no on-page company name, licence, registration number, or jurisdiction against which to assess disclosure. Whether the site discloses these things is unclear, and the real-world operator is not independently verified. No third-party broker or regulatory-database record matches the domain. This absence is neutral on its own. It does mean no regulated status can be credited, so the site should not be treated as a regulated or licensed service. Evidence:

• Homepage: no company, licensing, or jurisdiction information appeared in the content captured.
• Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US), a shared platform that hosts many unrelated tenants and so says nothing about the operator.
• Transport encryption: the TLS certificate was issued by WE1 at domain-validation (DV) level, valid to 2026-12-03 (39 days remaining). It confirms an encrypted channel only, not organizational identity.

What to Verify Next

Because of the active adverse listing, the first step is to treat the address as untrusted and avoid submitting any data to it. If a business claims to operate from this address, its identity should be confirmed through an independently sourced contact route, such as a number or address found on a known official channel. Any licence it claims should then be checked directly in the relevant regulator's registry. Anyone who received this link by message, email, or advertisement should preserve the original communication and report it to the sender's platform and to the hosting platform's abuse channel. Re-assessment is warranted only if the listing is cleared and the site later presents full, consistent identity and legal pages. Evidence:

• Homepage: the suspected-phishing warning is the only content available to establish what the site is.
• Legal and contact pages: none were observed, so no claimed operator or licence exists to check yet.
• Transport encryption: a valid certificate exists but carries no identity assurance, so it cannot substitute for the checks above.

Summary Verdict

The site carries an elevated, clearly adverse risk posture. A confirmed reputational listing, a platform-level phishing warning in place of real content, and the absence of any verifiable operator identity converge on a single conclusion. The domain should be regarded as unsafe for sensitive interaction, and nothing in the evidence offsets that conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses (IPv4 and IPv6) are Cloudflare edge servers. No origin server was observable, so the real hosting location cannot be independently verified. This protection mitigates direct exposure and shows the platform's bot challenge is active. It does not establish legitimacy and cannot offset the adverse listing. The edge-only view also means the content behind it can change quickly without any visible infrastructure change.

Closing Assessment

Interaction should be limited to passive viewing at most. Logins, credential entry, payments, and file downloads should be avoided entirely, and any link that led here should be treated as suspect and reported.