Is opseccloud-migrate.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain hosted on a public static-page hosting platform. Its name suggests a cloud-security or cloud-migration project. When visited by automated browsers, the homepage returned only a blank placeholder with no readable branding, product description, or business offering. Its purpose and business model therefore cannot be determined from on-page content, and the available evidence concerns its reputation and technical footprint rather than anything it states about itself.

Scam/Impersonation Risk

This is a confirmed blacklist case. The address is flagged as malicious by a large cluster of independent security engines, and the flags include three tier-one security vendors. That convergence is decisive and cannot be discounted as noise from a single scanner. No conflicting legal identities or brand impersonation were observed. The assessment rests on external threat listings, not on page content, because the homepage displayed nothing that could be analysed. A visitor could still be exposed to credential-harvesting or malware-delivery content that the blank placeholder did not reveal. Content served to an automated visitor can differ from content served to a real one. Sensitive interaction with this address is therefore unsafe, and only passive, read-only exposure is defensible. Evidence:

• Homepage: multiple independent security engines classify the address as malicious, with one further engine marking it suspicious (16 malicious and 1 suspicious detections in total).
• Homepage: three tier-one security vendors (Fortinet, Kaspersky, Sophos) are among the engines that flag the address.
• Homepage: it rendered only a blank placeholder with no content, so no brand, product, or legal-entity claim could be tested for impersonation.
• Domain provenance: registered in late 2024 (~1.9 years old). The web archive holds 9 snapshots spanning 2024–2026 (3 years tracked), which shows a young, thinly documented history.

Regulatory Verification Notes

The captured homepage carries no legal entity name, terms of service, privacy policy, licensing statement, or registration number. This is a content gap on the site itself. It is secondary here, because the confirmed threat listings, not the missing disclosures, drive the risk assessment. No broker-reputation record matches this site, so there is no third-party regulatory or reputational signal to weigh in either direction. The site offers no basis for treating it as a regulated or licensed operator. Real-world operator identity remains unverified and ownership is opaque. The valid transport encryption is a domain-validated certificate. That confirms an encrypted connection and does not confirm who operates the site or whether it is safe. Evidence:

• Homepage: no legal, licensing, or corporate identity information was presented.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-09.
• Hosting: served from AS13335 (CLOUDFLARENET – Cloudflare, Inc., US).
• Third-party broker dataset: no matching record.

What to Verify Next

Before any engagement, confirm through an independent route who is claiming to operate this address. That means checking the originating communication, such as an email, message, or advertisement that pointed to it, against the claimed organisation's officially published contact channels. If the link asks for a login, a migration action, or any payment, treat it as unsolicited until the organisation confirms it directly through a channel found independently of this site. Anyone who has already entered credentials or downloaded files from this address should change the affected passwords from a clean device and run a malware scan. Organisations may also want to report the address to their security team so it can be blocked. Evidence:

• Homepage: no verifiable contact or ownership details were presented to check.
• External reputation: current malicious listings from multiple vendors indicate the address should not be trusted until it is delisted.
• Behavioural testing: three successful visits showed stable responses and no wallet, clipboard, or hidden-form activity, so verification should focus on origin and intent, not on observed on-page exploits.

Summary Verdict

The overall posture is high-risk. Strong, converging external threat detections decisively outweigh the technically sound features of the site and the absence of impersonation or identity-conflict findings. The site is not a candidate for login, credential entry, or financial interaction, and the assessment is cautionary and security-forward.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server was not visible. This is a mitigating factor only. It shows ordinary, professionally operated delivery infrastructure and no abnormal resolution behaviour. It cannot offset the reputation risk. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes behind the same address.

Closing Assessment

Do not enter credentials, approve migrations, install files, or make payments through this address. If it must be examined, do so only in an isolated environment and in read-only fashion. Escalate the link to a security team if it arrived in an unsolicited message.