Is Pages a scam? TrustSniffer's high-risk assessment of nearar.pages.dev: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a project hosted on a free Cloudflare Pages subdomain. When visited, it served a platform-level "Suspected Phishing" warning interstitial instead of its own content. The visitor therefore sees only a short block notice, not a product, service or business. Its apparent purpose cannot be determined from the content, and the warning itself suggests it was set up to deceive visitors.

Scam/Impersonation Risk

The assessment is clearly cautionary. A leading browser-safety service flags the domain for social engineering, and several major security vendors independently classify it as malicious. Multiple confirmed blacklist sources agree, so this is a confirmed blacklisting, not a soft reputational signal. The hosting platform's own phishing interstitial, returned with an access-denied response, corroborates the external listings. Two independent signal families therefore converge on a deceptive-site classification. No conflicting legal identities and no specific brand impersonation were identified, because the site exposed no brand or identity content to compare. Behavioural testing did not detect wallet-connection prompts, wallet-drainer activity, clipboard manipulation, hidden forms or credential posts to external hosts. The protective block and the absence of observable content limit how much of the site's behaviour could be tested. These benign sandbox results cannot offset the external threat detections. The page also made heavy use of third-party network requests and produced a high volume of script errors, which is consistent with an unstable or hastily assembled deployment. Evidence:

• Homepage: the only content served was a Cloudflare interstitial titled "Suspected Phishing", returned with a 403 response and about 380 characters of text.
• Reputation: the browser-safety service flagged the domain for social engineering, and multiple security vendors, including several top-tier ones, flagged it as malicious.
• Behavioural sandbox: three successful runs recorded no wallet-connect, drainer, clipboard-hijack or hidden-form activity, but did record 18 console errors and a majority of requests going to external hosts.

Regulatory Verification Notes

The only page reachable was the platform's warning notice, so no legal, terms, about or contact page could be assessed. No company name, licence, registration number or regulator claim was observed, and nothing can be inferred from that. The site could not be connected to any real-world operator, and no third-party broker or regulatory record matched the domain. This is context only, not a licensing verdict. The technical profile is ordinary. Transport encryption is valid, and the certificate is a domain-validated one from a known issuer. A domain-validated certificate only proves control of the domain, so it says nothing about the operator's identity or intent. Evidence:

• Homepage: no operator, entity or licensing disclosure was present in the interstitial content.
• Transport encryption: TLS certificate issued by WE1 (domain-validated), valid to 2026-12-18.
• Hosting: served from AS13335 (Cloudflare, Inc., US), a shared platform subdomain, not a standalone registered domain.

What to Verify Next

Any prospective interaction should begin with the external listings, not with the site's own claims. Anyone who received this address by message, advertisement or social media should treat the source of that link as suspect and confirm the sender's identity through an independent channel. If the link claims to represent a known brand or service, the brand's official domain should be reached by typing it directly or through a trusted bookmark, and this address should be disregarded. Any repeat assessment should only take place after the listings have been formally cleared and the site serves substantive content with identifiable operator and legal pages. If the site is the user's own, a clean-up and review request with the listing providers is the proper route. Evidence:

• Homepage: the platform warning replaced all site content, so no official contact or support channels could be confirmed from the site.
• Reputation: both the browser-safety listing and the multi-vendor malicious detections are current and would need to be formally cleared.
• Hosting: the address is a shared platform subdomain, so the site has no independent branded domain to check against an official registry.

Summary Verdict

The posture is high risk. Confirmed blacklisting by independent security sources, together with the hosting platform's own phishing warning, outweighs the technically valid but generic security setup. The operator's identity and purpose could not be established, and nothing observed supports treating the site as legitimate.

Infrastructure Integrity

The site sits entirely behind a major content-delivery and web-application-firewall provider. All four observed addresses are edge servers, and the origin server could not be observed, so the real hosting location cannot be independently checked. The provider's protections and its recognised network standing are mitigating factors only. They do not offset the reputational findings, and they make it easier to swap content quickly without an outside observer noticing.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any payment. Contact with it should be limited to read-only inspection in an isolated environment, if at all. Anyone who has already entered credentials or authorised a wallet should change the affected passwords and revoke wallet permissions immediately, and report the link to the hosting platform's abuse channel.