---
title: "Is fpxy.pages.dev a Scam? Trust Score 22/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "fpxy.pages.dev"
verdict: "Critical Risk"
title: "Is fpxy.pages.dev a Scam? Risk Report, Score 22/100"
trust_score: 22
classification_confidence: 70
canonical_url: https://trustsniffer.com/report/fpxy.pages.dev
assessed: 2026-10-29
---

# Is fpxy.pages.dev a scam? TrustSniffer's high-risk assessment: 22/100

## Verdict


**Verdict: Critical Risk, trust score 22/100.** fpxy.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-29 by automated analysis. Classification confidence 70%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 1.9 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (2 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the fpxy.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/fpxy.pages.dev/screenshots/first.png)

_What fpxy.pages.dev served when TrustSniffer captured it on 2026-10-29. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a project hosted on a free, shared-platform subdomain at a major edge-hosting service. Visitors do not reach any identifiable product, brand or service. The only content presented is a short security interstitial titled as a suspected-phishing warning, served behind a bot-challenge gate. The site's apparent purpose and business model cannot be established from anything it shows, and its operator is not connected to any real-world brand or person.


### Scam/Impersonation Risk

Contradictory signals are present, and they are material. The domain is **blacklisted**: multiple independent security engines classify it as malicious or suspicious, including a tier-one network-security vendor, and a separate external blacklist signal corroborates this. The page a visitor receives is itself a suspected-phishing warning, and the domain carries a prior phishing association in historical records. These findings do not by themselves prove a specific impersonated brand. No brand impersonation or conflicting legal identities were observed, and no contact address with an anomalous domain was published. The behavioural profile is mixed. Automated sessions found no wallet-connection prompts, clipboard manipulation, hidden or credential-harvesting forms, or suspicious inline scripts, and all external requests went to recognised destinations. The page nonetheless generated a heavy volume of third-party requests relative to its size, along with repeated client-side console errors, and the infrastructure shows fast-rotating, ephemeral DNS characteristics. Together these are consistent with a short-lived or disposable deployment. The reputation findings outweigh the benign behavioural results, because threat listings reflect what the site has actually been seen doing. Evidence:

- Homepage: the visitor-facing page is a warning interstitial headed as suspected phishing, and automated capture was blocked by a bot challenge.
- Reputation: several independent engines flag the domain as malicious or suspicious, and an external blacklist is active.
- Domain provenance: about 1.8 years of registration continuity, with only 2 archive snapshots between December 2024 and August 2026 (3 years tracked, a 2-year maximum gap).
- Behaviour: no wallet-drainer, clipboard-hijack or external credential-form activity in three successful runs, but 24 third-party XHR requests and 17 console errors on a page with about 380 characters of text.

### Regulatory Verification Notes

No licence, registration number, company name or legal page could be assessed, because the site presents only the warning interstitial. Nothing connects this domain to a regulated or registered entity, and no third-party regulatory or broker record matched it. This is a verification gap rather than evidence of wrongdoing, and the elevated risk rests on the reputation findings above. Registration details are incomplete, which points to ownership opacity and not to an identity contradiction. The site runs on a shared-platform subdomain, so the domain gives no independent evidence of who operates it. A valid transport-encryption certificate is in place, but a domain-validated certificate only confirms control of the domain and says nothing about the operator's legitimacy. Evidence:

- Transport security: TLS certificate issued by WE1 (DV), valid to 2027-01-01.
- Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
- Identity: no operator, legal entity, licence or registration details were observable on the homepage.
- Third-party broker coverage: no matching broker or regulatory-reputation record.

### What to Verify Next

Anyone who received a link to this site should confirm with the party who sent it, through an independent route such as a known phone number or a previously trusted channel, that the link is genuine and was intended. If the site claims to represent a particular company, that company should be asked through its official, independently sourced website whether it operates this address. If the site is represented as a financial or investment service, the claimed operator's licence should be checked directly with the relevant regulator's public register. The domain's reputation status should be re-checked after any remediation by the owner before the assessment is revisited. Evidence:

- Homepage: no company name, licence or contact route is presented to check against.
- Reputation: the current threat listings and the platform's own phishing warning are the standing basis for caution.
- Registration: the shared-platform subdomain provides no independent ownership anchor.

### Summary Verdict

The evidence converges on a high-risk posture. Active malicious or suspicious classifications, a platform-level phishing warning, and an unidentified operator outweigh the technically sound transport encryption and the absence of overtly hostile page behaviour. The site is not apparently legitimate, and its real-world operator is not identified.


### Infrastructure Integrity

The site is delivered through a major CDN and WAF, and all observed addresses are edge servers. The origin server was not observable, so the real hosting location cannot be independently verified. The edge infrastructure and bot protection are reputable and mitigate direct exposure, but they are protective tooling and do not establish the legitimacy of the content behind them. They cannot offset the reputation findings.


### Closing Assessment

Treat the site as unsafe for login, credential entry, payments or any financial interaction, and do not download or run anything from it. Any visit should be limited to passive viewing, ideally from an isolated environment. Anyone who has already entered credentials or payment details should change those credentials and notify the relevant provider.


_Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of fpxy.pages.dev.

- The request stayed on fpxy.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-12-23. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c98 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-01 |
| Domain age | 1.85 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-12-23 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about fpxy.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [vv-direct-website.pages.dev](https://trustsniffer.com/report/vv-direct-website.pages.dev), a similar name (Critical Risk, 0/100)
- [swap-cow-ti.pages.dev](https://trustsniffer.com/report/swap-cow-ti.pages.dev), a similar name (Critical Risk, 0/100)
- [cowswap-dapp.pages.dev](https://trustsniffer.com/report/cowswap-dapp.pages.dev), a similar name (Critical Risk, 0/100)
- [water-whitelisting.pages.dev](https://trustsniffer.com/report/water-whitelisting.pages.dev), a similar name (Critical Risk, 5/100)
- [app-aim-bot.pages.dev](https://trustsniffer.com/report/app-aim-bot.pages.dev), a similar name (Critical Risk, 5/100)
- [multiresolvesolution.pages.dev](https://trustsniffer.com/report/multiresolvesolution.pages.dev), a similar name (Critical Risk, 5/100)
- [tranzzak.pages.dev](https://trustsniffer.com/report/tranzzak.pages.dev), a similar name (Critical Risk, 0/100)
- [votes-hyperswaps-com.pages.dev](https://trustsniffer.com/report/votes-hyperswaps-com.pages.dev), a similar name (Critical Risk, 25/100)
- [tobacco-hub.com](https://trustsniffer.com/report/tobacco-hub.com), another site assessed as critical-risk (Critical Risk, 9/100)
- [blockstreampc.app](https://trustsniffer.com/report/blockstreampc.app), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/fpxy.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/fpxy.pages.dev · assessed 2026-10-29.*