Is snapshots-kamino-102.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a numbered subdomain on a free, shared web-hosting platform. When the analysis system tried to load it, the visitor saw only a security interstitial, not any site content. The interstitial states that the site "has been reported for potentially distributing malware" and offers an "Ignore & Proceed" button. No products, services, forms, legal pages or business claims were visible. The site's apparent purpose and business model therefore cannot be determined, and the only observable function of the page is to warn visitors away.

Scam/Impersonation Risk

The contradictions here are hard and come from reputation, not from conflicting identity claims. Several independent threat-intelligence engines classify the domain as malicious or suspicious, including at least one top-tier network-security vendor. This convergence is why the domain is treated as blacklisted. The visitor-facing warning matches those listings, so the two sources corroborate each other. No conflicting legal entities were found, and no phishing page or brand impersonation was confirmed. The danger is the possible distribution of malicious software, not a confirmed impersonation. Because the underlying content was never visible, the specific payload or lure cannot be described. The hosting platform allows anyone to publish disposable sites on free subdomains. That makes the reported behaviour harder to attribute to an accountable operator and easier to repeat under a new address. Behavioural testing also showed heavy third-party request activity and repeated console errors on the captured page. The traffic went to recognised destinations, so it is a minor observation next to the reputation findings. Evidence:

• The homepage capture is a security interstitial warning of suspected malware distribution, with a bypass option, and no site content behind it.
• Four threat-intelligence engines flagged the domain as malicious and one as suspicious, and an external blacklist confirmation is recorded.
• The sandbox saw 21 external XHR requests and 9 external POSTs across three runs, none to non-whitelisted destinations, plus 18 console errors.
• The page showed no login form, no hidden forms and no wallet-connection behaviour.

Regulatory Verification Notes

No legal, about, terms or licensing pages were reachable, because the only content captured was the warning interstitial. The site claims no licence or registration, so there is no regulatory status to assess. No third-party broker or regulatory-database record exists for this site. A licence check would have no basis here and cannot offset the reputational findings above. The site presents no operator name, jurisdiction or accountable entity, so its real-world identity remains unverified. The site's TLS certificate is valid and issued by a recognised authority. This confirms an encrypted connection only. Domain-validated certificates are issued automatically and say nothing about the operator's legitimacy. Evidence:

• The site's hosting infrastructure is on AS13335 (Cloudflare, Inc., US).
• The TLS certificate was issued by YE2 at domain-validation (DV) level and is valid to 2027-01-04.
• No licence, regulator, company name or registration number appears anywhere in the captured content.
• No third-party broker-reputation match was found.

What to Verify Next

Do not interact with the site beyond viewing the warning. Confirm whether the warning has been cleared by checking the same address in the hosting platform's abuse-reporting channel and in independent reputation checkers. If someone sent the address as a link or download, ask the sender to confirm through a separate, trusted channel that it is legitimate. Scan any device that has already opened the page or downloaded anything from it with up-to-date endpoint security. If the site is claimed to belong to a known organisation, confirm that its official address matches by navigating from that organisation's own channels. Do not rely on this address. Evidence:

• The captured page itself says the site is reported for potential malware distribution.
• The address sits on a shared free-hosting platform, so ownership is not implied by the platform.
• Browser behaviour flags recorded a malware-warning page with a proceed-anyway option.

Summary Verdict

The evidence supports a clearly cautionary, high-risk posture. External threat detections are decisive, and the site cannot be treated as safe for credentials, financial activity or downloads. The only favourable signals are technical hygiene, such as a working encrypted connection. They do not offset the reputational findings and do not establish who runs the site.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and no origin server was observable. This is protective infrastructure and a mitigating factor only. It does not make the content safe, and it limits independent verification of where the content is actually hosted. The warning page appears to come from this layer and is consistent with the external reports.

Closing Assessment

Treat the address as unsafe. Do not log in, enter credentials, make payments or download files from it, and limit any contact to viewing the warning. If the page has already been opened and anything was downloaded or entered, run a security scan and change any exposed credentials.