Is web-swiftmdmdapp.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a web application hosted on a free subdomain of Cloudflare's static-site hosting platform, under a name suggesting a mobile-app or wallet-style service. When analysed, the address did not serve ordinary content. It returned a platform interstitial titled as a suspected-phishing warning, and automated access was refused with a bot-challenge response. The site's purpose and business model therefore cannot be established from its own content, and the only substantive thing it presented was that warning.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The address is blacklisted: a substantial cluster of independent security engines classifies it as malicious, including several tier-one vendors, and an external blacklist hit is confirmed. The platform's own interstitial labels the page as suspected phishing, which is consistent with those detections. No conflicting legal entities appear. The evidence does not show brand impersonation as a separate finding, but the combination of a disposable platform subdomain, a generic app-style name, and active phishing classification fits a credential-harvesting or wallet-lure pattern. Behavioural testing found no wallet-drainer activity, clipboard hijacking, hidden forms, or external password forms. This does not offset the reputational findings, because the interstitial may have prevented the real application from loading during testing. Runtime behaviour was nonetheless noisy: a very high share of traffic went to external hosts, the page structure changed heavily after interaction, and repeated script errors occurred. That profile is consistent with a heavily scripted front end that loads content from third parties. Evidence:

• Homepage: the response was a Cloudflare suspected-phishing interstitial with a 403 bot-challenge status. Only a very small amount of text was captured.
• Reputation: a substantial cluster of security engines, including Fortinet, Kaspersky and Sophos, flagged the domain as malicious, and an external blacklist hit is confirmed.
• Behavioural sandbox, three runs: heavy external request traffic (118 external XHR/fetch calls), a large DOM mutation spike after interaction (1,508 mutations), and 11 console errors. No wallet-connect, clipboard-write, or hidden-form activity was observed.

Regulatory Verification Notes

No licensing, registration, or legal-entity disclosure could be assessed, because the only content observed was the platform's warning page and no terms, about, or legal pages were reachable. A free platform subdomain carries no independent corporate identity, and the operator's real-world identity is not verified. Nothing links the site to a regulated entity, and no third-party broker record matches it. The valid certificate and recognised issuer show only that transport encryption is in place. They say nothing about who operates the site or whether it is lawful. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 at DV (domain-validated) level, valid to 2027-01-23, with about 83 days remaining at analysis. DV validates domain control only, not organisational identity.
• Broker intelligence: no match in the reputational broker dataset.

What to Verify Next

Any organisation or product the site claims to represent should be checked through its official channels, reached by independent means such as a known website typed directly, an app store listing from the verified publisher, or an offline contact. The site's own links should not be used. Anyone who received this address through a message, advertisement, or social post should treat the sender as unverified and confirm the message's origin separately. A party that legitimately owns the deployment should inspect the project for compromise or unauthorised content, then request a review from the hosting platform and the detecting vendors after remediation. Evidence:

• Homepage: the platform's own warning, together with the confirmed blacklist hit, means no on-site claim can currently be relied on.
• Identity: no real-world brand or person could be connected to the site.

Summary Verdict

The site is assessed as critically untrustworthy. Confirmed third-party blacklisting and a platform-issued phishing classification outweigh the technical hygiene the domain displays. Its identity is unverified and its behaviour is unclear, so it is treated as a high-risk asset.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host is not visible. The edge-only view limits independent hosting verification and lets content change quickly without any visible change in infrastructure. Cloudflare's bot protection is active and its edge network is well established. These are mitigating factors only and do not offset the reputational findings.

Closing Assessment

The address should not be used for login, credential entry, wallet connection, payments, or any financial interaction, and nothing should be downloaded from it. Any link that led here should be reported and left unopened, and anyone who already entered credentials or approved a wallet connection should change those credentials and revoke the approvals immediately.