Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
giza-net.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 12 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 20252 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a small, single-page web property titled "Giza" that is published as a subdomain on a shared free-hosting platform rather than on a dedicated, independently registered domain. Its landing page carries a modest amount of text and loads heavily from third-party sources. It shows no clearly identifiable commercial offering, brand owner, or business model, so its apparent purpose is unclear.
Scam/Impersonation Risk
The principal concern is that the site is blacklisted by external reputation sources. Several independent detection engines classify the address as malicious and another as suspicious. Separately, a prior phishing association is recorded against the domain. No conflicting legal identities and no brand impersonation were observed, so the risk rests on reputation and behavior rather than on identity contradictions. The homepage's behavior does not offset this: it generated a very high volume of third-party requests, with the large majority of its traffic going to external destinations, and made several external data submissions. All of these went to recognized destinations. No wallet-draining, clipboard-hijacking, hidden-form, credential-forwarding or cloaking behavior was detected. The site's short and thin history adds to the concern, because a newly appearing page on a disposable subdomain with active threat flags matches a common pattern for short-lived abuse infrastructure.
- Homepage (reputation): three detection engines rated the address malicious and one suspicious, while a large number of others rated it harmless or undetected. The site is nonetheless treated as blacklisted.
- Homepage (behavior): 105 external XHR/fetch requests, up to 86.9% of traffic going to external hosts, and 3 external POST submissions across 3 sandbox runs, none to non-whitelisted destinations.
- Homepage (behavior): no wallet-connect, clipboard-write, hidden-form or external password-form activity detected.
- Domain provenance: approximately 0.97 years old, with only 2 archive snapshots spanning 2025 (1 year tracked), first seen 2025-11-05.
Regulatory Verification Notes
The site's single page was captured, but no legal entity, licensing or registration disclosure could be associated with it, and the real-world operator is not independently identified. Ownership and governance are opaque, which is an administrative limitation and is not treated as an identity contradiction. Because the site sits on a shared platform subdomain, no organization-controlled domain anchors any claim of identity. No third-party broker or regulatory-registry record matched the site, so there is no external reputational context on this point either way. Technical hygiene is present but does not establish legitimacy: the site's transport encryption is valid and issued by a known authority, but it is only basic domain-level validation, which confirms control of the name and nothing about the operator.
- Homepage: no company name, license number or registered-entity disclosure identified.
- Hosting: served from AS13335 (Cloudflare, Inc., US; registry ARIN).
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-18, with about 83 days remaining.
- Registry check: no matching broker or regulator record found.
What to Verify Next
Before any interaction, the operator's identity should be established from an independent source, because the site itself provides none. That means finding out which person or company publishes the page and whether it appears in an official business registry or in the licensing registry of a relevant regulator. Any invitation, link or message that led to the site should be traced back to its sender through a separate, known channel, and any official contact channels should be confirmed offline. The address should be re-checked against current reputation listings, since flags on shared-platform subdomains can change after clean-up or further abuse.
- Homepage: no identifiable publisher or ownership statement to check against a registry.
- Domain structure: hosted as a subdomain of a shared platform, so ownership cannot be inferred from the domain name.
- Reputation: current detections remain active against the address.
Summary Verdict
The overall posture is elevated risk. Active external threat detections, a very short and sparse history, and unverified operator identity converge on a clearly cautionary assessment, and the standard technical hygiene present does not change that conclusion.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF, and all four observed addresses are edge servers; the origin server was not observable. This is a mitigating factor only. It shows ordinary, reputable delivery infrastructure and a clean network-abuse record for the shared address, but it says nothing about the content or the operator behind it. Edge-only visibility also means the underlying content can be changed quickly, and the protective layer cannot offset the reputation risk already recorded.
Closing Assessment
The site should not be used for sign-in, credential entry, payments or any financial interaction. If it must be examined at all, access should be limited to read-only viewing from an isolated environment, and nothing should be downloaded from it.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, history in the web archive, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of giza-net.pages.dev.
- The request stayed on giza-net.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2025-11-05. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f06 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-18 |
| Domain age | 0.97 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2025-11-05 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about giza-net.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.