Is stargazezone.pages.dev a scam? TrustSniffer's high-risk assessment: 17/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a free-tier subdomain on a major edge-hosting platform. When visited, it presented only the platform's own interstitial warning page, titled "Suspected Phishing", instead of any identifiable commercial or informational content. No product, service or business model could be observed from the page. The only visible purpose is a landing endpoint whose public presentation has been replaced by a hosting-platform security warning.

Scam/Impersonation Risk

Contradictory signals are present and material. Several independent threat-intelligence sources flag the domain as malicious or suspicious, and these detections amount to a confirmed blacklisting, which is the decisive factor in this assessment. The hosting platform's own interstitial classifying the page as suspected phishing is consistent with that reputation picture. It means the site's real content could not be retrieved for review, so the actual lure or purpose remains unexamined. No wallet-connection attempts, clipboard manipulation, hidden forms or externally posted password forms were observed during behavioural testing. Those clean results do not offset the reputational findings, because the page that loaded was a warning screen rather than the underlying content. The same testing recorded a high share of requests to external destinations, including repeated external data calls and external POST submissions, and a notable volume of page script errors. These are consistent with a page that pulls in third-party resources, but none could be tied to a specific malicious function. No conflicting legal identities or brand impersonation were identified. The risk rests on the threat detections and the platform warning. Evidence:

• Homepage: the page delivered was a platform challenge screen titled "Suspected Phishing", and the request was refused with an access-denied response.
• Reputation: multiple threat-intelligence engines classified the domain as malicious or suspicious, and an external blacklist hit was recorded.
• Behavioural testing: 3 of 3 runs completed, with 12 external data requests, 6 external POSTs and 12 console errors, all with no wallet, clipboard or hidden-form activity.

Regulatory Verification Notes

The captured page carried no legal, licensing, company-registration or contact disclosures, so no operator identity could be tied to the site. Hosting on a shared platform subdomain means the address itself conveys no corporate identity. No third-party broker or regulatory-registry record matched the site. The identity of the operator is therefore unestablished. The shared subdomain, the absence of any observed disclosure and the active threat detections together mean no regulated or licensed status can be inferred. Whether the site belongs to a malicious actor or a compromised legitimate owner cannot be determined from the available evidence. Evidence:

• Homepage: the only content captured was a short security-interstitial text, with no company name, licence number, address or terms of service.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US) on a shared platform subdomain.
• Transport security: the TLS certificate was issued by WE1 (DV, domain validation only), valid to 2026-12-29 with 62 days remaining. DV confirms control of the domain only, not the operator's identity.

What to Verify Next

Any contact with this address should start from independent confirmation of who operates it and why it was flagged. The party that supplied the link, such as an email, message or advertisement, should be asked to confirm it through a separate, known channel. The official site of any brand the link claims to represent should be reached by typing its known address directly. The platform's abuse-reporting channel and the threat-intelligence detections should be checked for the current listing status before the address is revisited. If the site is a legitimate property, its owner should be contacted through an official offline route to find out whether it has been compromised or reported in error. Evidence:

• Homepage: the platform warning replaced all site content, so the intended offering cannot be assessed without owner confirmation.
• Reputation: the current detections show the address is actively listed, so any later change in status should be confirmed rather than assumed.

Summary Verdict

The overall posture is high risk. Active reputational detections and a platform-level phishing warning outweigh the technically sound transport security, and no operator identity or legitimate purpose is established. The site should be treated as unsafe for any sensitive interaction.

Infrastructure Integrity

The site sits behind a mainstream CDN and web application firewall, and all observed addresses are edge nodes. The true origin server is not visible. This is a mitigating factor only, because it shows the platform is reputable but says nothing about the content or operator. It cannot offset the threat detections, and edge-only visibility prevents independent verification of what is actually hosted behind it.

Closing Assessment

The address should not be used for logging in, entering credentials or making payments, and nothing should be downloaded from it. Any link that led here should be treated as suspect and reported to the platform's abuse team. If the page has already been opened and any data was entered, the affected passwords should be changed and the accounts monitored.