Is test-verify.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page presence on a free subdomain of a public static-hosting platform, titled "Account Verification". It presents a short block of text with no recognisable brand, product catalogue or commercial offering. Its apparent purpose is to prompt a visitor to complete an account-verification step. That theme is a common lure format, and nothing on the page ties it to a named organisation.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. Several tier-one security vendors independently flag the site as malicious, and a wider set of engines classify it as malicious or suspicious. The aggregate detection level is high enough to be confirmed external blacklisting. This is a confirmed blacklisting signal, and it is the decisive factor in the assessment. The "Account Verification" title on a throwaway subdomain matches a recognised credential-harvesting pattern. The captured evidence does not establish a specific impersonated brand, and no conflicting legal identities were observed. The site should still be treated as a probable vehicle for credential or identity capture until proven otherwise. Behavioural testing found no wallet-drainer activity, clipboard hijacking, hidden forms or credential posts to external hosts. That reduces the evidence of active in-page exploitation. It does not outweigh the reputational findings, because a page can be switched to a harmful flow after a clean capture. Evidence:

• Homepage: titled "Account Verification" with only a short passage of text and no named operator, product or service.
• Reputation: multiple leading security vendors flag the domain as malicious, and the combined detections trigger the external kill switch.
• Behavioural sandbox: three successful runs on the homepage showed no external credential posts and no wallet or clipboard abuse, but they did record several console errors and a notable DOM change after interaction.
• Domain: a subdomain of a shared hosting platform, so the domain gives no independent evidence of ownership or longevity.

Regulatory Verification Notes

The captured page carries no legal, terms, privacy or about content. It names no operating entity, jurisdiction, licence or registration number. Because the page offers "account verification" with no stated service or regulated activity, no licensing claim can be tested, and none should be assumed. The operator cannot be linked to any real-world brand or person, and governance and ownership transparency are absent on the observable content. These are verification gaps, not contradictions in themselves. They deepen concern here only because they coincide with the confirmed external detections. No broker-reputation match was found for this site. The only encryption evidence is a domain-validated certificate. It confirms an encrypted connection and does not show who operates the site. Evidence:

• Homepage: no company name, address, licence number, regulator reference or policy links appear in the captured text.
• Hosting: resolves to AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-03, with the issuer and subject-name coverage normal for the platform.

What to Verify Next

Anyone who reached this page through an email, SMS, advertisement or message should treat that message as suspect and not follow its instructions. The requesting organisation should be contacted only through channels obtained independently, such as the number on a bank card, an official app or a known corporate website typed in by hand. Any account the page claims needs "verification" should be checked by signing in directly at the genuine provider's address, not through this page. If credentials or personal data were already submitted, the affected passwords should be changed immediately, multi-factor authentication enabled, and the account provider notified. The message and link should be reported to the impersonated brand's abuse desk and to the hosting platform's abuse process. Evidence:

• Homepage: the verification prompt gives no explanation of which service or account it concerns, so its legitimacy cannot be tested from the page.
• Reputation: the site's flagged status means a legitimate organisation would not normally be expected to direct customers to it.
• Platform: the subdomain is on a shared hosting service, so a takedown request can be sent to the platform's abuse channel.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, together with an unverifiable operator and a credential-themed page, outweigh every technical or behavioural reassurance. The site has no demonstrated legitimacy, and trust cannot be extended.

Infrastructure Integrity

The site is delivered through a major, reputable content-delivery and security network, and all four observed addresses are edge nodes. The origin server was not observable. The platform's protections and a valid certificate are mitigating signals only and cannot offset the reputational findings. Abuse reports exist against one of the shared edge addresses. They apply to infrastructure serving many unrelated customers, carry no confidence weighting, and are discounted, so they are not treated as evidence against this site.

Closing Assessment

Account logins, credentials, personal data and payments should not be entered on this site, and nothing should be downloaded from it. At most, the page may be viewed passively in an isolated environment for investigation. Any message directing users here should be reported and not acted on.

Signals weighed against the site

• AbuseIPDB: 7 reports on hosting IP 2a06:98c1:3120::1 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.