Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
izumi-finance.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 13 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.9 years oldRegistered history | Clear |
| Web archive | Archived since 202415 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This is a finance-branded web property, "izumi-finance", served from a free shared subdomain on a developer-hosting platform rather than from a registered corporate domain. Its apparent purpose is to present a finance or DeFi-style service. When the page was captured, the visitor-facing content was a security interstitial headed "Suspected Phishing", returned with an access-denied status. No product, pricing or corporate content was observed.
Scam/Impersonation Risk
Confirmed adverse reputation signals converge on this site, and the website is currently blacklisted by external threat-intelligence sources. Several independent security engines flag it as malicious, including three tier-one vendors. That alone is decisive and places the site in a high-risk posture. The interstitial captured in place of site content is consistent with those findings, because it describes the destination as suspected phishing. A finance-themed name on a throwaway shared subdomain, with no independently established brand behind it, is a standard pattern for credential-harvesting and fake-platform campaigns. No conflicting legal identities and no explicit brand-impersonation finding were recorded. The risk therefore rests on reputation and infrastructure convergence, not on identity contradictions.
Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms, credential posts to external destinations or device fingerprinting. All external requests went to recognised destinations. This lowers the likelihood of an active drainer on the pages that could be exercised, but it cannot offset the malicious classifications. Gated content, the blocked capture and a high volume of console errors mean the full user journey was not exercised.
- Homepage: the captured page was a challenge or interstitial titled as suspected phishing, returned with an access-denied status, with no site content.
- Reputation: 13 security engines flagged the domain as malicious and 1 as suspicious, including Fortinet, Kaspersky and Sophos. A critical-detection threshold was exceeded.
- Provenance: the domain has been registered about 1.9 years (since roughly late 2024). The web archive holds 15 snapshots from 2024-09-21 to 2026-08-03, covering 3 years tracked.
- Behaviour: 22 external XHR requests and 4 external POSTs were observed across 3 test runs. None went to non-whitelisted destinations, and no wallet, clipboard or hidden-form activity occurred.
Regulatory Verification Notes
The evidence shows no regulatory registration, licence reference or verifiable legal entity for this operator. Its real-world identity cannot be independently connected to any known brand or person. Ownership and governance opacity are present. These are administrative transparency limitations, kept separate from the reputational findings above. Without a verifiable operator, a user has no accountable counterparty or recourse route if funds or credentials are lost. No third-party broker-review entry was matched, so no regulatory or broker verdict can be drawn either way.
- Identity: the operator's identity was not independently verified. No legal-entity disclosure, licence or registration number was established for the site.
- Transport security: the TLS certificate is issued by WE1 at domain-validated (DV) level, valid to 2026-11-29. DV validation confirms only domain control, not the operator's identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Organisations and individuals who encounter this domain should locate the genuine Izumi-branded service only through an independently sourced channel, such as the project's official documentation, a known community announcement or a previously bookmarked address. They should confirm that this subdomain is not referenced there. Any link that led to this site, such as an email, advertisement or social post, should be treated as potentially malicious. It should be reported to the security team or the relevant platform abuse channel, and the sender should be authenticated through a separate route. If the site is later claimed to hold a licence or registration, that claim must be checked directly with the named registry, not through links on the site.
- Referral path: the site's status as a shared-platform subdomain means any claim of association with an established brand must be confirmed from that brand's own channels.
- Reputation: the current external detections should be re-checked after any claimed remediation, since the finding is active.
- Homepage: the page presented a phishing warning instead of services, so no product claims could be verified.
Summary Verdict
Available evidence supports an elevated-risk, clearly cautionary posture. Confirmed adverse security classifications, a short and unremarkable operating history, and an operator who cannot be identified or held accountable outweigh the mitigating signals. Those signals are the valid certificate, the absence of observed drainer behaviour and the established hosting platform. The site is not suitable for any sensitive or financial interaction.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN/WAF, and all observed addresses are edge servers, so the origin host was not observable. A valid certificate and a mainstream, well-regarded network provider are mitigating factors only. They show the site is technically well-formed, not that it is legitimate. They cannot offset the active malicious detections, and edge-only visibility prevents independent confirmation of where the content is actually hosted.
Closing Assessment
The domain should not be used for login, credential entry, wallet connection or any transfer of funds. At most, it warrants non-interactive review from an isolated environment. Links to it should be blocked or reported, and no files should be downloaded from it.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of izumi-finance.pages.dev.
- The request stayed on izumi-finance.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2024-09-21. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2ca1 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-29 |
| Domain age | 1.93 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-09-21 |
| Archive snapshots | 15 |
| Reputation | VirusTotal: 13 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about izumi-finance.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.