Is swap-cow-ti.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a hosted subdomain on a free, shared web-publishing platform. Its name suggests a cryptocurrency token-swap theme. When the analysis captured its entry page, the visitor was shown a security interstitial titled as a suspected-phishing warning, not any product, service, or business content. The site's apparent purpose therefore cannot be established from its own content. The only observable behavior is a gated, warning-bearing entry point on disposable-style hosting.

Scam/Impersonation Risk

This site carries a confirmed blacklist condition and is assessed as high risk. A substantial group of independent security engines currently flags the domain as malicious. These include several tier-one security vendors, whose detections the assessment treats as decisive. The page returned to the analysis was an access-blocked response titled as a suspected-phishing warning. That is consistent with the external detections and counts against the site. No impersonation of a specific brand and no conflicting legal identities were established, because no identity content was reachable. The contradictions are therefore reputational and threat-driven, not identity-driven. Sandbox behavior was mixed. The page made no wallet-connection attempts, clipboard manipulation, hidden forms, or credential posts to third parties, and all outbound requests went to recognized destinations. However, outbound traffic dominated the page's activity and it produced a high volume of script errors. A token-swap-style name on free hosting, combined with active threat detections, matches the profile of throwaway lures used for credential or wallet-theft campaigns. This does not establish that the owner is the actor. Evidence:

• Homepage: the captured page was blocked behind a bot challenge with an access-denied status and carried the title "Suspected Phishing", so no site content could be assessed.
• External reputation: 13 security engines flagged the domain as malicious and 1 as suspicious, including three tier-one vendors, which triggered the strongest reputational cap.
• Homepage behavior across three sandbox runs: 24 outbound background requests and 4 outbound posts, none to unrecognized destinations, with 18 console errors and no wallet-connect, drainer, or clipboard-hijack activity.

Regulatory Verification Notes

The captured content gives no operator name, legal entity, registration number, or licensing information. The only page reached was the warning interstitial, so no terms, privacy, about, or contact pages could be assessed. Real-world identity of the operator is therefore unverified, and the evidence supports no claim of regulated status. No third-party broker or regulator database record matched the site, so there is no external reputational signal on regulatory standing. The site's technical foundations are ordinary and do not offset the threat detections. Its transport encryption is valid but only domain-validated, meaning it confirms control of the hostname and says nothing about who operates it. Evidence:

• Transport layer: TLS certificate issued by WE1 (domain-validated), valid to 2026-11-30.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party registry check: no broker or regulatory match for this site.

What to Verify Next

Verification should begin with the original source of any link that led to this address. The question is whether it came from an official, independently confirmed channel of a known brand or from an unsolicited message, advertisement, or social post. If the site claims to represent an existing swap or exchange service, its official domain should be confirmed through that project's established channels. Reaching it from a bookmark or typed address is safer than following this link. Any claimed licensing, registration, or support channel should be checked offline against the relevant public registry or directly with the named organization. Recipients of this link who have already interacted with the page should review any wallet approvals or reused credentials. Evidence:

• Homepage: the only content reached was a phishing-warning interstitial, so no brand or operator claim exists to validate.
• Identity: the site cannot be independently tied to any real-world brand or person.

Summary Verdict

The site's overall posture is high risk. The decisive factor is a confirmed negative reputation from multiple independent security sources. Nothing observed in the site's identity or content offsets it, and the operator remains unidentified. Standard technical hygiene does not change this assessment.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall. All four observed addresses are Cloudflare edge servers on AS13335, and the origin server was not observable. This arrangement is a mitigating factor for availability and basic transport security only, and it is not evidence of legitimacy. The edge-only visibility also prevents independent verification of where the content is actually hosted. Protective infrastructure cannot counter the independently confirmed reputation risk here.

Closing Assessment

This address should not be visited for any sensitive purpose. No credentials should be entered, no wallet should be connected or transaction approved, and nothing should be downloaded from it. If the link arrived unsolicited, it should be treated as hostile, reported to the hosting platform's abuse channel, and discarded, with any prior interaction followed by credential rotation and wallet-approval review.