Is isync.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a free, shared web-hosting platform, so it has no standalone branded domain. When analysed, its entry page returned a short security interstitial instead of site content. That interstitial was a hosting-platform challenge page titled as a suspected-phishing warning. Its apparent purpose and business model therefore cannot be determined from the content a visitor is shown, and nothing on it identifies a product, brand or operator.

Scam/Impersonation Risk

The evidence shows confirmed adverse external reputation. Several independent threat-intelligence engines currently flag the domain as malicious, with one more rating it suspicious, and at least one top-tier security vendor is among them. The site is therefore treated as formally blacklisted, and this is the decisive factor in the assessment. The captured entry page is itself a hosting-platform warning labelled as suspected phishing, which corroborates the external detections. Archive history also carries a known-phishing association. No brand impersonation and no conflicting legal identities were observed, but only because no on-site content could be inspected. Browser-behaviour testing found no wallet-connection prompts, no clipboard manipulation, no hidden forms, and no credential forms posting to external hosts. This is not exculpatory, because the interactive content sits behind a bot-challenge gate. The testing did record heavy third-party traffic (a very high share of requests going to external hosts, including several external POST submissions) and a high volume of script errors during page load. The domain also closely resembles the generic name of its hosting platform, a pattern consistent with a disposable or lookalike deployment. No suspicious contact address was identified. Evidence:

• Entry page: the captured response was a blocked, bot-challenge interstitial titled as a suspected-phishing notice, and no site content was retrievable.
• External reputation: 4 engines rated the domain malicious and 1 suspicious, with a top-tier vendor among them.
• Browser behaviour: 22 external fetch/XHR calls and 4 external POSTs, 19 console errors, and no wallet, clipboard or hidden-form activity.
• Provenance: the domain is ~2.1 years old, with 12 archive snapshots spanning 2024–2026 (3 years tracked).

Regulatory Verification Notes

No legal, terms, privacy or about pages could be assessed, so no licensing status, corporate registration or named operator can be linked to the site. The site cannot be tied to any real-world brand or person, and operator accountability is unestablished. Hosting on a shared subdomain means the domain itself carries no organisational identity. No third-party broker or regulatory-registry record matched the site, so no reputational signal from that quarter applies. The conclusion rests on the confirmed external threat detections, not on the absence of licensing. Evidence:

• Entry page: no company name, licence or registration reference was visible in the retrieved content.
• Domain structure: the site is a subdomain of a free hosting platform, not an independently registered brand domain.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-18. This confirms encryption only and says nothing about operator legitimacy.

What to Verify Next

Until the external detections are cleared, interaction should be limited to passive observation, avoiding any login, credential entry, wallet connection or payment. If the site was reached through a message, advertisement or referral, its origin should be confirmed with the sender through an independent channel. A named operator should then be identified through an authoritative source. If the site belongs to a known organisation, that organisation's official channels should confirm whether this deployment is theirs. If it is theirs, it may have been compromised or misused and should be reported for clean-up. The hosting platform's abuse process and the flagging engines' own re-evaluation status should be checked for any change before reconsidering the site. Evidence:

• Current state: the site is flagged by multiple threat-intelligence sources and challenged by its own hosting platform.
• Identity: the entry page offers no verifiable operator identity or official contact route.
• Access gating: a bot challenge blocked normal retrieval of the entry page, so interactive functions remain unexamined.

Summary Verdict

The overall posture is high risk. Confirmed adverse threat-intelligence detections, a hosting-platform phishing warning, and an unverifiable operator identity converge on a clearly cautionary conclusion. Technical hygiene such as valid encryption does not offset this. The site is unsuitable for any sensitive interaction.

Infrastructure Integrity

The site sits behind Cloudflare CDN/WAF, and every observed address is a Cloudflare edge address on AS13335 (US, ARIN-registered). No origin server was exposed. The CDN and its bot-protection layer are mitigating factors only. They show standard, reputable delivery infrastructure, but they also prevent independent verification of the true hosting origin and cannot offset the confirmed reputation findings. A valid, long-dated certificate from a recognised issuer is likewise a baseline hygiene signal and not evidence of legitimacy.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial transaction. Any account details or funds already submitted to it should be treated as at risk and changed or reported promptly. Further engagement should wait until the external detections are formally cleared and an accountable operator is independently confirmed.