Is Pages a scam? TrustSniffer's high-risk assessment of migrates-singularity-ai.pages.dev: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is an artificial-intelligence-themed property served from a free subdomain on a shared web-publishing platform. It has no standalone brand domain. The only page content collected from the homepage was a brief browser interstitial titled as a suspected misleading website, not a branded product or service page. The site's apparent purpose therefore cannot be established from its own content, and the available evidence points to a disposable, low-commitment web property rather than an established business.

Scam/Impersonation Risk

Contradictory signals are present and material. Multiple independent threat-intelligence sources currently list the site as malicious, and several well-known security vendors are among the flagging engines. The site is blacklisted, and the volume of detections is high enough to override every protective or positive factor in the profile. No brand impersonation, phishing-page replication, or conflicting legal identities were observed, but the blacklisting alone is decisive. The homepage was withheld behind a bot-challenge response, and the interstitial that replaced it describes the site as suspected of being misleading. The behavioural sandbox showed no wallet-connection prompts, clipboard tampering, hidden forms, or cloaking, so a specific attack mechanism is unconfirmed. Even so, the site's traffic pattern is dominated by third-party requests, which fits a thin front end that delegates its real behaviour elsewhere. The free-subdomain structure also makes rapid redeployment under a different name trivial. Evidence:

• Homepage: the page served at analysis time was a 403 bot-challenge response with the title "Suspected Misleading Website", carrying only a short block of text.
• Threat intelligence: 13 engines flagged the domain as malicious and 1 as suspicious. Three tier-one vendors were among them, and the combination triggered a hard cap on the site's rating.
• Homepage behaviour: across 3 sandbox runs, 125 external XHR calls and 6 external POST requests were recorded. External traffic peaked at 96.2% of requests, and 18 console errors were logged. None of the external calls went to non-whitelisted destinations.
• Provenance: the domain is about 1.6 years old, and the web archive holds a single snapshot dated 2025-04-10 (1 year tracked), which gives no meaningful operating history.

Regulatory Verification Notes

The site presents no regulated status. No licence, registration number, or named legal entity was identified, and no third-party broker or regulator record matched the site. Operator identity is not independently verified, and ownership and governance are opaque. This is an administrative limitation on its own. In this case it adds to, rather than offsets, the threat listing. No legal, terms, or about pages were captured that could ground a claim of legitimacy, so nothing on the site supports the identity or accountability expected of an operator handling credentials or funds. Evidence:

• Legal and identity pages: no legal entity, licence, or registration reference was found in the content analysed.
• Transport encryption: a DV-level TLS certificate issued by WE1, valid to 2026-12-20 (52 days remaining). This confirms encrypted transport only, not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

No sensitive interaction is supported at present, so verification is about whether the site can ever be rehabilitated. First, the site's publisher should be identified through an independent route, such as the organisation or individual that directed a user to it, rather than through anything the site claims. Second, any official channels for the supposed AI product should be confirmed through that organisation's own known, separately sourced website. Third, the threat listings should be re-checked with the flagging security vendors, and the interstitial warning should be confirmed as lifted, before the site is considered for any use beyond viewing. Evidence:

• Threat intelligence: the current listings from multiple sources remain the controlling fact until they are formally delisted.
• Homepage: the content gate and the "suspected misleading" warning page must be cleared before any content can be assessed.
• Legal and contact pages: no verifiable operator or official contact channel was found.

Summary Verdict

The overall posture is high-risk. Confirmed threat listings from multiple independent sources override every neutral technical attribute, and the limited, challenge-gated content gives no legitimate offering to weigh against them. Operator identity remains unverified, and the evidence supports treating the site as hostile until proven otherwise.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web-application firewall, with all observed addresses being edge servers and the origin not observable. The provider is reputable, and the DNS profile and TLS configuration are technically orderly. These attributes are mitigating only. They show that the front door is well managed but say nothing about the intent of the content published behind it, and they cannot offset the threat listings. The edge-only visibility also prevents independent verification of where the content is actually hosted.

Closing Assessment

Treat the site as unsafe for any sensitive purpose: do not log in, enter credentials, make payments, or download anything from it. Visits should be limited to passive viewing in an isolated environment, if they are needed at all. Anyone who reached the site through a message or advertisement should report that source.