Is solspin-8dn.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is an anonymous subdomain on a shared Cloudflare Pages hosting namespace, with a name suggesting a "spin"-style product. When visited, it did not serve ordinary site content. It returned a security interstitial titled as a suspected-phishing warning, together with a bot challenge. No product, operator or business model could be established from the page. The apparent purpose is therefore unconfirmed, and the available evidence is dominated by external threat detections.

Scam/Impersonation Risk

The contradictory signals here are severe and convergent. A major browser safe-browsing service classifies the site under its social-engineering category, which covers phishing and deceptive-content abuse. A double-digit number of independent security engines also flag it as malicious, including several top-tier vendors. This is a confirmed blacklist condition, and it is the decisive factor in the assessment. Protective hosting and a valid certificate cannot offset it. No conflicting legal identities or brand-impersonation claims were observed, and no wallet-connection, clipboard or hidden credential-form behaviour was detected in the sandbox. The risk therefore rests on reputation and on the social-engineering classification, not on a demonstrated drainer or credential-theft mechanism. Sandbox runs also showed a heavy share of outbound third-party requests relative to first-party content, plus a high rate of script errors. That pattern is consistent with a thin or unstable page, but it does not confirm abuse by itself. Credential entry, onboarding or payment on this site should be treated as unsafe. Evidence:

• Homepage: capture returned a Cloudflare interstitial titled as a suspected-phishing warning, not site content, and the request was refused at the challenge stage.
• Reputation: the safe-browsing service flagged the domain as social engineering; 12 engines rated it malicious and 1 suspicious, including 3 top-tier vendors.
• Homepage behaviour: 26 external XHR/fetch requests across 3 sandbox runs, about 95% external traffic share at peak, and 18 console errors; no wallet, clipboard-hijack or external password-form activity was seen.

Regulatory Verification Notes

The captured page carried no legal, terms, privacy or about content. No licence, registration number or named operating entity could be tied to the site, and no real-world brand or person could be independently connected to it. This is ownership opacity, not an identity contradiction. The site runs on a free shared-hosting subdomain, so no standalone corporate domain anchors any claim of institutional identity. No third-party broker or regulatory-database match was found, so no regulatory standing can be inferred in either direction. The valid certificate is domain-validation only. It confirms encrypted transport and nothing about who runs the site. Evidence:

• Homepage: no legal-entity name, licence, registration or policy content was available.
• Hosting: served from AS13335 (Cloudflare, Inc., US) on a shared pages-hosting subdomain.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-09 (42 days remaining).

What to Verify Next

Verification should start with the threat reports. Anyone considering contact should check the current status of the safe-browsing and multi-engine detections through the providers' own public lookup pages. Any link that led here should be traced back to its source, such as an email, advertisement or message. That source should be treated as potentially malicious until it is cleared. If a specific organisation claims to operate this site, its identity and official web address should be confirmed through an independent, offline route (a published phone number or its verified corporate website). The site should be reached only through channels already known to be legitimate. Because the site discloses no licensing, any regulated-service claim should be checked directly with the relevant registry before any engagement. Evidence:

• Homepage: the suspected-phishing warning is the sole page-level content observed.
• Reputation: detections came from several independent sources, so each can be re-checked independently.
• Hosting: the shared subdomain gives no operator information to cross-check, so verification must start outside the site.

Summary Verdict

The site sits in the critical-risk tier. Confirmed external blacklisting and a social-engineering classification are decisive, and nothing in the available evidence is strong enough to offset them. Its legitimacy cannot be established, and the posture is clearly cautionary.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses were edge servers, and the origin server was not observable. The certificate is valid and issued by a recognised authority, and the sandbox found bot protection rather than evasive cloaking. These are mitigating factors only. They show competent edge hosting, but because the platform is shared and free, they say nothing about the operator's intent and do not offset the external threat detections.

Closing Assessment

The site should not be used for login, credential entry, onboarding or any financial activity. Any entered credentials should be considered exposed and changed immediately. Nothing should be downloaded from it. If it was reached through an unsolicited message or advertisement, that message should be reported and the site left alone.