Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
fluxbyte-zentrasmarthub.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page decentralized-application front end titled "Dapps Leading Synthetic Protocol", published on a free subdomain of a shared web-hosting platform under the name "fluxbyte-zentrasmarthub". The homepage carries only a short block of text and presents itself as a synthetic-asset protocol. Its apparent purpose is to draw visitors into on-chain or financial interaction, though no operating entity or product documentation is evident from the captured content.
Scam/Impersonation Risk
The site is blacklisted by external threat intelligence, which is a confirmed contradiction and the decisive element of this assessment. A reputation source currently flags the domain as malicious, and a second detection marks it as suspicious. The site's own name is a long, generic brand-like string on a shared-platform subdomain. That pattern matches throwaway or lookalike deployments, and anyone can register such subdomains at no cost. Nothing independently ties the site to a real-world brand or person. No conflicting legal entities were observed, so this is not an identity contradiction. The concern comes from the threat-intelligence listing combined with the lack of any verifiable operator. In the behavioral sandbox the homepage showed no wallet-connection prompt, clipboard manipulation, hidden forms or external credential posts. It did rewrite large portions of its page structure after interaction and produced a high volume of script errors. That is consistent with an unstable or hastily assembled front end and does not by itself prove malicious intent. The listing nonetheless places this site firmly in a cautionary category for any sensitive action.
- Homepage: an external blacklist hit is recorded, with one malicious and one suspicious detection across the reputation sources consulted (58 harmless, 33 undetected).
- Homepage, behavioral sandbox: 45 console errors and 2,347 DOM mutations after interaction across 3 successful runs.
- Homepage, behavioral sandbox: 3 external requests, all to whitelisted destinations; no wallet-connect, clipboard-write or hidden-form activity.
- Domain: a shared-platform subdomain with a long brand-like label that closely resembles its parent platform domain, with no independent brand association.
Regulatory Verification Notes
The captured homepage contains only a short block of text (982 characters). It gives no clear legal entity, licensing or registration statement, or governance disclosure, so on-page disclosure is unclear. Ownership of the site is opaque and cannot be tied to any accountable operator. This is a verification gap and not proof of wrongdoing in itself. For a site presenting itself as a financial protocol, however, the absence of any accountable operator or regulatory standing is material. No third-party broker or regulator record matched this domain. The technical hygiene signals are ordinary and do not offset the reputation listing. The transport encryption is valid, but it only shows that the connection is encrypted and says nothing about the operator's legitimacy.
- Homepage: no legal entity name, license number, registration details or terms of service were captured.
- TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-08 (46 days remaining).
- Served from AS13335 (Cloudflare, Inc., US; registry ARIN).
- Third-party broker intelligence: no record matched this domain.
What to Verify Next
Do not rely on anything the site asserts about itself. Any claim of a team, audit, token or protocol should be checked through independent channels. A named project should have a verifiable presence on a recognized code repository, a documented contract address on a public block explorer, and corroboration from established industry sources. The registry of the relevant financial regulator should be searched for any entity claiming to offer synthetic-asset products. Official contact and support channels should be confirmed through an independent route and not through links on this site. The threat-intelligence listing should also be rechecked in a few weeks to see whether it is cleared or confirmed by additional sources.
- Homepage: the synthetic-protocol title is the only product claim captured, and nothing supports it.
- Domain: sits on a shared subdomain, so no independent corporate web presence can be matched to the project name.
- Reputation: the current listing has not been corroborated by a second malicious-flagging source.
Summary Verdict
The overall posture is elevated risk. A confirmed external blacklist hit, an unverifiable operator and an unstable page-behavior profile outweigh the routine technical hygiene present. Apparent legitimacy cannot be established. The site should be treated as untrusted for any sensitive purpose.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN/WAF, and all four observed addresses are CDN edge nodes. The origin server was not observable. Protective infrastructure is a mitigating factor only, and here it cannot offset the reputation listing. Edge-only visibility also prevents independent verification of the true hosting location and can mask rapid content changes behind a stable front. The fast-flux-like DNS pattern is an unconfirmed heuristic, so it carries no weight in this assessment.
Closing Assessment
Interaction should be limited to passive viewing. No account login, credential entry, wallet connection, token approval or financial transaction should be attempted on this site until the threat listing is cleared and an accountable operator is independently confirmed.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fluxbyte-zentrasmarthub.pages.dev.
- The request stayed on fluxbyte-zentrasmarthub.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f27 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-08 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fluxbyte-zentrasmarthub.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.