Is foxshouse.pages.dev safe? TrustSniffer's low-trust assessment: 42/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a small web property on the free, shared Cloudflare Pages hosting namespace. Automated visits received only a Cloudflare bot-challenge response, so no brand, product, service or business model could be observed, and its apparent purpose cannot be determined from the captured content.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Several independent threat-intelligence engines classify the site as malicious, and a tier-one security vendor is among them. The reputation picture is therefore blacklisted by confirmed external detections, not merely a soft reputational concern. The page returned to the analysis sensor was an interstitial titled as a suspected-phishing warning, which is consistent with those detections. Seven abuse reports exist against a Cloudflare edge IP address the site resolves to. These apply to shared provider infrastructure with a zero confidence rating, so they are discounted and are not held against the site. No conflicting legal identities and no brand impersonation were observed, and no wallet-connection, clipboard-manipulation or hidden-form behaviour was triggered in three sandbox runs. The site's network behaviour is nonetheless unusual. A large share of its traffic goes to external hosts and the browser logged repeated console errors. This pattern fits a thin page that relies on third-party resources, and it adds to the caution without establishing intent. The external detections stand regardless of whether the operator is a deliberate actor or a compromised party. Evidence:

• The homepage capture was a Cloudflare challenge page (HTTP 403) titled "Suspected Phishing | Cloudflare", with very little text and no site-authored content.
• Sandbox observation of the homepage recorded 12 external XHR/fetch calls and 6 external POST requests, all to whitelisted destinations. External requests made up about 87% of the peak network activity, and 12 console errors were logged.
• Archive history covers 10 snapshots from 2024-09 to 2025-03 (about 2 years tracked). The domain is roughly 1.8 years old.

Regulatory Verification Notes

The site presented no legal, terms, privacy or about content in the captured material. Licensing status, a corporate registration or a named operator therefore cannot be assessed. No regulator or broker-rating dataset matched this site, so no third-party reputational signal exists on that front. The operator's real-world identity is unconfirmed, and the registration record shows ownership opacity. This is an administrative limitation and not a contradiction in itself, but it leaves the external threat detections without any accountable party to answer them. The valid transport encryption is only a baseline hygiene signal. Domain-validated certificates are issued automatically to any controlled hostname and do not attest to who operates the site. Evidence:

• The site is served from AS13335 (Cloudflare, Inc., US). The site's own pages publish no disclosure of an operating entity.
• The TLS certificate was issued by WE1 at DV level and is valid to 2027-01-14.
• The domain sits under the shared pages.dev namespace, so it has no independently registered domain identity.

What to Verify Next

Before any engagement, obtain a direct statement from the claimed operator through an independent, offline route that names the legal entity behind this hostname. Confirm that entity in the relevant company or financial-services registry in its home jurisdiction. Check whether the hostname is referenced from any official channel of a known brand, because a free-hosting subdomain is easy to create and discard. A re-scan after the operator reports remediation would show whether the external detections have been cleared. Evidence:

• The homepage disclosed no operator, registry number or official contact route.
• The malicious classifications attach to this hostname itself, not to the shared hosting provider.

Summary Verdict

The overall posture is one of elevated risk. The weight of confirmed external threat detections outweighs the clean transport encryption and the stable, uninterrupted archive history, so the site is treated as unsafe for any sensitive interaction. The evidence shows a short-lived free-hosted property with an unconfirmed operator. It does not show a site that has earned trust.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and the origin server was not observable, so independent verification of the real hosting location is not possible. The bot-protection layer is a mitigating factor for availability and abuse resistance only. It cannot offset the external reputation risk, and it also means the visible content can be altered at the edge without detection from outside.

Closing Assessment

Access should be limited to passive, read-only viewing at most, with no account creation, login, credential entry, payment or financial interaction, and no file downloads, until the external detections are cleared and an accountable operator is independently confirmed.

Signals weighed against the site

• AbuseIPDB: 7 reports on hosting IP 2a06:98c1:3120::1 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.