Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
site-8652333466-fiatify-app.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 7 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a subdomain on a free static-hosting platform, with a name referencing a "Fiatify" app. Visitors who request the page are not shown a normal site. They get a Cloudflare interstitial titled "Suspected Phishing". The page presents no readable products, pricing or contact content, so its business purpose cannot be established from what it displays. A subdomain of this kind is typically used to host a front-end for a web application or onboarding flow, and the interstitial is a warning that this one is being treated as abusive.
Scam/Impersonation Risk
This assessment is clearly cautionary. Contradictory signals are present. More than ten independent security engines currently classify the site as malicious, including two tier-one vendors, and this is a confirmed blacklisting rather than a soft reputational note. The hosting platform's own challenge page labels the site as suspected phishing, which agrees with the engine detections. No conflicting legal identities and no explicit brand-impersonation finding were observed. The sandbox found no wallet-drainer behaviour, clipboard manipulation, hidden forms, or credential forms posting to external hosts. These absences do not offset the blacklisting. The drawn-out threat listing is decisive, and the site should be treated as unsafe for any sensitive interaction. The browsing profile also showed a heavy share of traffic going to third-party hosts, but all of it went to recognised destinations. Repeated console errors during rendering suggest an unstable or partially functioning front end.
- Homepage: a request returns a Cloudflare challenge page (HTTP 403) titled "Suspected Phishing", so no site content is displayed to a visitor.
- External reputation: more than ten engines flag the domain as malicious and one as suspicious, including two tier-one vendors. A blacklist hit is confirmed.
- Homepage behavioural sandbox: 3 of 3 runs completed. Up to 87% of requests after interaction went to external hosts (12 external XHR calls, 6 external POSTs), all to recognised destinations. 12 console errors were logged.
- Homepage behavioural sandbox: no wallet connection, clipboard writes, hidden forms or external password forms were detected.
Regulatory Verification Notes
The site gives no verifiable link to a real-world operator. It runs on a shared platform subdomain rather than an independently registered domain, which keeps ownership opacity present and leaves the site's identity unconfirmed. Nothing visible indicates a financial licence, registry number or named legal entity. This is a verification gap, not proof of wrongdoing, but it adds to the blacklisting. No third-party broker or regulatory-database record matched this site, so no reputational context from that source is available. A valid TLS certificate is present. It confirms encrypted transport only and says nothing about who operates the site or whether it is legitimate.
- Hosting: served from AS13335 (Cloudflare, Inc., US) behind shared edge infrastructure.
- Transport encryption: a DV certificate issued by WE1, valid to 2027-01-03 (about 68 days remaining), with subject alternative names present.
- Homepage: the page cannot be read, so no operator name, licence or registration details can be assessed.
- Third-party broker lookup: no match.
What to Verify Next
No verification step makes this site safe to use while the threat listing stands. Anyone who needs to deal with the "Fiatify" name should find the provider's official website through an independent route, such as a regulator register, a verified app-store listing or an offline contact. They should then compare that address with this one. If the brand claims regulatory authorisation, the licence should be confirmed directly in the relevant registry, not through a link supplied by this site. Anyone who has already visited the site, connected a wallet or entered details should treat those credentials and approvals as exposed and revoke or change them.
- Homepage: the interstitial and the engine detections both remain active, so the site's current content is untrusted.
- Domain: the address is a platform-assigned subdomain, so it carries no independent brand registration to compare against an official domain.
- Behaviour: the sandbox saw no wallet interaction, but the page's front end loads many external resources and could change after the capture.
Summary Verdict
The overall posture is high-risk. Multiple independent threat detections and the platform's own phishing warning outweigh the technically sound transport security and the absence of observed credential-capture behaviour. The site's real operator and purpose remain unconfirmed, and the evidence points to an abusive or compromised property that cannot be endorsed for any sensitive use.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are shared edge IPs, so the origin server could not be seen. This protective layer is a mitigating factor only. It provides no evidence of legitimacy and limits independent verification of where the content is actually hosted. Seven abuse reports exist against one of the edge IPs. They concern shared provider infrastructure and carry no weight against this site, so they are discounted in the assessment.
Closing Assessment
Do not log in, connect a wallet, enter credentials, make payments or download anything from this site. Any viewing should be limited to passive, isolated inspection by security staff. The site should be reported to the hosting platform and re-assessed only after the threat listings clear.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 7 reports on hosting IP 2a06:98c1:3120::1 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of site-8652333466-fiatify-app.pages.dev.
- The request stayed on site-8652333466-fiatify-app.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2a06:98c1:3120::1 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-03 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0% confidence, 7 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about site-8652333466-fiatify-app.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.