---
title: "Is sale-creator-bid.pages.dev a Scam? Trust Score 22/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "sale-creator-bid.pages.dev"
verdict: "Critical Risk"
title: "Is sale-creator-bid.pages.dev a Scam? Trust Review, 22/100"
trust_score: 22
classification_confidence: 70
canonical_url: https://trustsniffer.com/report/sale-creator-bid.pages.dev
assessed: 2026-10-27
---

# Is sale-creator-bid.pages.dev a scam? TrustSniffer's high-risk assessment: 22/100

## Verdict


**Verdict: Critical Risk, trust score 22/100.** sale-creator-bid.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 70%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 1.7 years old (Registered history) | Clear |
| Web archive | Archived since 2025 (4 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the sale-creator-bid.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/sale-creator-bid.pages.dev/screenshots/first.png)

_What sale-creator-bid.pages.dev served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page presence on a free, shared hosting subdomain. Its address uses the words "sale", "creator" and "bid", and it has no standalone domain of its own. The page captured at the root address was not site content. It was an interstitial notice titled as a suspected-phishing warning, and no legible products, services or business model could be retrieved. Its apparent purpose is therefore unclear, and the available evidence does not support treating it as an ordinary commercial or informational site.


### Scam/Impersonation Risk

Confirmed adverse reputation is the decisive issue. Several independent threat-intelligence engines classify the site as malicious, with a further engine rating it suspicious, and at least one top-tier security vendor is among the flagging sources. The site is therefore **blacklisted**, and the web-archive history also carries a known-phishing marker. No conflicting legal entities and no specific brand impersonation were observed, so this is not an identity contradiction. The risk arises from the external detections and the phishing warning page. In the behavioral sandbox, the site's observed network traffic was overwhelmingly directed to third-party origins, with repeated external data requests and outbound POST submissions and a high rate of client-side script errors. All of those destinations fell within known, whitelisted services. No wallet-connection prompts, clipboard manipulation, hidden forms, credential forms posting to external hosts, or browser fingerprinting were detected, so there is no direct evidence of active credential or asset theft. That limits the confirmed finding, but it does not offset the blacklisting. The host label's sale, creator and bid wording is also a common lure theme for solicitation campaigns, though no page content confirms such use. Evidence:

- Reputation checks: 3 engines flagged the domain as malicious and 1 as suspicious, and the external blacklist check was positive.
- Homepage capture: the page returned an access-denied status and displayed a suspected-phishing notice instead of site content.
- Domain provenance: registered 2025 (~1.7 years old), a young domain.
- Web-archive depth: 4 snapshots spanning Feb–Mar 2025 (1 year tracked), a sparse history.

### Regulatory Verification Notes

No legal, terms, privacy or about content could be assessed, so no licence, registration number or named operating entity is associated with this site. Operator identity is not independently established, and ownership opacity applies. This is a verification matter on its own and does not by itself indicate a scam, but here it coexists with confirmed adverse reputation signals. No third-party broker or regulator-sourced record matches this domain, so there is no reputational or licensing context that could mitigate the findings. The valid certificate is domain-validated only, which confirms encrypted transport and not who operates the site. Evidence:

- Homepage: no legal or corporate-identity disclosures were retrievable from the captured page.
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-05, with 39 days remaining.
- Hosting: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

The origin of the link or message that led to this address should be traced and the sender confirmed through an independent, offline or previously known channel. If a brand, marketplace or creator program is invoked, its official domain should be checked directly through the organisation's own known website, not through this address. Any contact or support details tied to this site should be confirmed through the same independent route. A fresh reputation re-check is warranted only after the operator demonstrates remediation, since current detections stand until then. Evidence:

- Homepage: the suspected-phishing notice means no operator-supplied content is available to cross-check.
- Reputation: the current detections come from multiple independent sources rather than a single flag.

### Summary Verdict

The site presents an elevated risk posture. Confirmed adverse reputation and a phishing warning outweigh the technically sound transport security and the absence of observed theft mechanics. The apparent legitimacy of the site is not established, and its operator remains unidentified.


### Infrastructure Integrity

The site is fronted by a major CDN and web application firewall, with all observed addresses being edge servers in the US and the real origin not exposed. The TLS certificate is valid from a known issuer. This protection is only a mitigating factor. It reflects the shared platform's hardening and does not offset the external threat detections, and edge-only visibility prevents independent confirmation of where the content is actually hosted.


### Closing Assessment

The site should not be used for logins, credential entry, payments or any financial interaction. Any further contact should be limited to non-interactive viewing, preferably in an isolated environment. Anyone who has already submitted information there should change the affected passwords and notify the relevant provider or their security team.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of sale-creator-bid.pages.dev.

- The request stayed on sale-creator-bid.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2025-02-05. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2c9a |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-05 |
| Domain age | 1.72 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2025-02-05 |
| Archive snapshots | 4 |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about sale-creator-bid.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [rewards-paal-ai-6da.pages.dev](https://trustsniffer.com/report/rewards-paal-ai-6da.pages.dev), a similar name (Critical Risk, 5/100)
- [mantra-zone.pages.dev](https://trustsniffer.com/report/mantra-zone.pages.dev), a similar name (Critical Risk, 5/100)
- [fgfggreerferf.pages.dev](https://trustsniffer.com/report/fgfggreerferf.pages.dev), a similar name (Critical Risk, 15/100)
- [blockdags-ef6.pages.dev](https://trustsniffer.com/report/blockdags-ef6.pages.dev), a similar name (Critical Risk, 5/100)
- [dev-movequest.pages.dev](https://trustsniffer.com/report/dev-movequest.pages.dev), a similar name (Critical Risk, 5/100)
- [moonedge-earn.pages.dev](https://trustsniffer.com/report/moonedge-earn.pages.dev), a similar name (Critical Risk, 5/100)
- [fixprotocol.pages.dev](https://trustsniffer.com/report/fixprotocol.pages.dev), a similar name (Critical Risk, 15/100)
- [smartfix-app.pages.dev](https://trustsniffer.com/report/smartfix-app.pages.dev), a similar name (Critical Risk, 5/100)
- [event-buttcoin.com](https://trustsniffer.com/report/event-buttcoin.com), another site assessed as critical-risk (Critical Risk, 2/100)
- [botamls.pro](https://trustsniffer.com/report/botamls.pro), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/sale-creator-bid.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/sale-creator-bid.pages.dev · assessed 2026-10-27.*