Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
promptrectifyapprove.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.7 years oldRegistered history | Clear |
| Web archive | Archived since 20254 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a subdomain on Cloudflare's shared Pages hosting platform. When the analysis crawler reached it, it returned a short interstitial page with a Cloudflare-served title reading "Suspected Misleading Website". It did not return any storefront, product, or corporate content. No business model, brand, or service could be established from the captured page. The address looks like a disposable project name on a free hosting service, not an organisational web presence.
Scam/Impersonation Risk
Contradictory signals are present and carry decisive weight. Multiple independent security vendors currently flag the site as malicious, including two widely used enterprise-grade engines, and an external blacklist listing is confirmed. This is a confirmed blacklist exposure. Reputation history also carries a prior phishing association. No brand impersonation and no conflicting legal identities were observed, but the page the crawler captured was itself a platform-level warning rather than genuine site content. The hostname sits on a shared free-hosting domain and closely resembles that platform's own name. That pattern is typical of throwaway deployments and is common in phishing and misleading-content campaigns. The behavioral sandbox found no wallet-connection attempts, clipboard manipulation, hidden forms, password forms posting to outside parties, or cloaking. These clean results do not offset the external detections. Nearly all observed network activity was directed at outside resources, though none of it went to unlisted destinations. Evidence:
- Homepage capture: blocked by a bot challenge (HTTP 403) and returned an interstitial titled "Suspected Misleading Website | Cloudflare", with about 428 characters of text.
- Reputation scan: 5 malicious and 1 suspicious detections across the engine pool, including two tier-one vendors, plus a confirmed external blacklist entry.
- Domain continuity of about 1.7 years (628 days). The web archive holds only 4 snapshots, all between 2025-02-01 and 2025-03-25 (1 year tracked), so the history is thin and ephemeral.
- Sandbox, 3 of 3 runs successful: 129 external XHR/fetch calls and 8 external POSTs (none to non-whitelisted hosts), 12 console errors, and no wallet, clipboard, or fingerprinting activity.
Regulatory Verification Notes
No legal, terms, privacy, or about pages could be assessed, because only the interstitial was captured. The site's operator is therefore not independently connected to any real-world brand or person, and ownership details are incomplete. This is an ownership-opacity limitation, not an identity contradiction. No licensing or registration claims were observed on the site, and no third-party broker or regulator record matched the domain. No regulatory standing can be inferred for this site. Evidence:
- Hosting and network: served from AS13335 (Cloudflare, Inc., US), with the network registry listed as ARIN.
- Transport encryption: TLS certificate issued by WE1 at domain-validated (DV) level, valid to 2026-12-07 (45 days remaining). DV confirms only control of the domain, not the operator's identity.
- Third-party broker database: no match for the domain.
What to Verify Next
Because the reputation findings are confirmed, the useful checks are about the site's origin and why it was flagged, not about onboarding. First, establish through an independent channel how the link reached the user (message, advert, or referral) and whether the supposed sender actually published it. Second, confirm with the organisation the link claims to represent that it operates this address. Do this through contact details obtained independently of the link, and also confirm the official support and contact channels. Third, security teams should check the current listing status with the flagging vendors, and with the hosting platform's abuse process, before any reassessment. Evidence:
- Homepage capture: the platform interstitial replaced any substantive content, so no on-site contact or ownership detail exists to cross-check.
- Reputation scan: the vendor detections and the blacklist entry are current at the time of analysis, and their reasons are not specified in the available data.
- Archive history: the 4 snapshots from early 2025 give no baseline of legitimate prior content to compare against.
Summary Verdict
The overall posture is high risk. Confirmed adverse reputation from multiple independent sources decides the assessment. Technical hygiene and clean behavioral results do not mitigate it. The site's identity is also unestablished, and the available evidence does not support treating it as legitimate.
Infrastructure Integrity
The site sits behind Cloudflare's CDN/WAF. All four observed addresses (two IPv4 and two IPv6) are Cloudflare edge servers, and no origin server was observable. Cloudflare is a reputable provider, so this setup removes obvious hosting-level red flags and the DNS profile looks ordinary. It is a mitigating factor only. Edge-only visibility also means the real hosting cannot be independently verified, and content could change quickly without any signal at the network level.
Closing Assessment
Treat the site as read-only at most. Do not enter credentials, connect a wallet, make payments, or download anything from it. Anyone who has already interacted with it should change any passwords entered and report the link to their security team or the hosting platform's abuse channel.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of promptrectifyapprove.pages.dev.
- The request stayed on promptrectifyapprove.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2025-02-01. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f95 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-07 |
| Domain age | 1.72 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2025-02-01 |
| Archive snapshots | 4 |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about promptrectifyapprove.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.