Is tranzzak.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a project hosted on a free, shared hosting subdomain of a public web-publishing platform. Its name, "tranzzak", suggests a transaction-oriented service. When visited, it presents a very short page, not a product or service site. That page is a protective interstitial headed "Suspected Phishing", served in front of the site and with only a few hundred characters of text. The site's own offering and business model could not be established from what it shows visitors. The only purpose the evidence supports is a short-lived web property that has drawn security warnings.

Scam/Impersonation Risk

Contradictory signals are present and decisive. A major browser-protection service classifies the site under social engineering, which covers deceptive pages built to trick visitors into disclosing credentials or making payments. A large cluster of independent security engines also rates it malicious, including several of the best-known endpoint and network security vendors. Together these produce a confirmed blacklist condition, and the platform's own phishing warning page points the same way. Behavioral testing found no wallet-connection prompts, clipboard tampering, hidden forms, or credential forms posting to external hosts. This does not offset the reputation findings, because a warning-flagged page can behave benignly in a short automated session and still be used against real visitors. Most of the page's network traffic goes to external destinations, with a notable number of external data submissions. All of it went to recognised, allow-listed services, and the page generated a high volume of script errors. No conflicting legal identities and no brand impersonation were detected, so the risk rests on the threat-intelligence listings, not on an identity contradiction. The domain name closely resembles the hosting platform's own domain, and the operator's identity has not been independently established. Evidence:

• Homepage: served behind a security interstitial titled "Suspected Phishing", with only a short block of text and no product, pricing, or service content.
• Reputation checks: browser-protection service flagged the site for social engineering, and multiple major security vendors independently rate it malicious.
• Domain provenance: roughly 110 days of observed history, with a single web-archive snapshot dated 2026-07-08 (1 year tracked).
• Behavioral sessions: three successful runs recorded no wallet-connection, clipboard-write, or hidden-form activity, but 25 external fetch requests, 5 external posts, and 18 console errors.

Regulatory Verification Notes

No licensing, registration, or regulatory standing could be associated with this site. No third-party broker or regulator listing matches it, so no reputational signal in either direction comes from that source. The operator remains unidentified. The site sits on a shared platform subdomain, which provides no standalone corporate registration record. This is an identity and governance gap, not an accusation by itself. It matters here because it coincides with the confirmed threat listings, and nothing exists to counterbalance them. Identity checks should therefore not be treated as a route to confidence unless the operator is independently established. Evidence:

• Served from AS13335 (Cloudflare, Inc., US) under the ARIN registry.
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-04. This confirms encryption but says nothing about who operates the site.
• No registered legal entity, licence, or regulator reference is tied to the site anywhere in the evidence.

What to Verify Next

The site should not be used for sign-in, payments, or any data entry unless the operator is independently established and the security listings are cleared. If a link to this site arrived through a message, advert, or social post, the claimed sender should be contacted through an independently sourced channel to confirm whether it is genuine. The listings should be re-checked later, since a cleared status would be the first sign of remediation. If the claimed service is regulated, its operator should be confirmed in the relevant registry through the registry's own search. Any official contact channels should be confirmed offline, not via the site. Evidence:

• The platform's own interstitial and the browser-protection classification are the primary reasons for restraint.
• No on-site identity, registry reference, or operator name was available to cross-check.
• The very recent domain history leaves no long record of benign operation to rely on.

Summary Verdict

The site's posture is elevated risk. The security listings are decisive and are not offset by its otherwise unremarkable technical hygiene, such as valid encryption and the absence of overtly malicious behavior in testing. The operator's real-world identity is unconfirmed, and no positive evidence of legitimacy outweighs the adverse findings.

Infrastructure Integrity

The site is delivered through Cloudflare's network, and all observed addresses are shared edge servers; the underlying origin host is not visible. This is protective, mainstream infrastructure and a mitigating factor, but it cannot offset the reputation risk. Because content sits behind the edge, it can also be swapped without any visible change in hosting.

Closing Assessment

The site should not be used for logins, credential entry, or financial transactions. Any link that led here should be treated as unsolicited and verified through an independent channel before further interaction. Report the site to the platform's abuse channel if it is encountered through a message or advert.