Is webauthdashboard-c8x.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page front end titled "Decentralized Dapp". It is served from a free project subdomain on a shared page-hosting platform, and its hostname suggests a web-authentication or dashboard function. To a visitor it presents itself as a decentralized-application interface. The captured homepage carries only a short body of text and gives no clear product description, operator name, or brand. Its apparent purpose is therefore an account or authentication-style gateway for a web3 service, but the page does not substantiate any legitimate business model.

Scam/Impersonation Risk

Confirmed contradictory signals are present, and this is the decisive consideration. The site is blacklisted: a major browser-safety service classifies it under social engineering, which is the category used for phishing and deceptive credential-harvesting pages. A tier-one security vendor and several other detection engines independently flag it as malicious or suspicious, so the verdict rests on converging independent sources. No conflicting legal identities or impersonation of a specific named brand were observed. The risk therefore comes from the confirmed threat listings and from the nature of the page, which is a generic "dapp" and authentication-themed interface on a disposable subdomain. Such a setup is a common vehicle for wallet-connection and credential-capture lures. The sandbox runs found no wallet-drainer behaviour, clipboard tampering, hidden forms, or cloaking, but benign behaviour in a limited run does not offset the external listings. Harmful behaviour may also be gated behind a specific visitor path, wallet, or referral link. Evidence:

• Homepage: classified by a major browser-safety service as a social-engineering page, with additional engines (six malicious, one suspicious) concurring.
• Homepage: titled "Decentralized Dapp" and hosted on a free shared-platform subdomain, with no brand, operator, or product detail.
• Behavioural sandbox: three successful runs showed no wallet-drainer, clipboard-write, hidden-form, or external credential-post activity, but six console errors and heavy page-structure changes after interaction.
• Site-wide: no conflicting legal entities or brand impersonation were observed.

Regulatory Verification Notes

The captured page gives no clear legal entity, registration number, licence, or governance disclosure, and no independent evidence connects the site to a real-world brand or person. This is a verification gap and not proof of fraud in itself. Here it compounds the confirmed threat listings, because a page asking for authentication on a gateway of this kind would normally identify the accountable operator. No third-party broker or regulatory record matched this site, so no outside reputational or licensing context is available. The site's technical hygiene is unremarkable and offers no assurance about its intent. A valid but entry-level certificate and mainstream hosting are available to any actor, including malicious ones. Evidence:

• Homepage: no operator name, legal entity, licence, or registration reference is visible.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-13.
• Third-party registry context: no broker or regulatory match was found.

What to Verify Next

Do not rely on anything the page itself states. First, establish how the link was received (message, advertisement, social post, or search result), since unsolicited delivery strengthens the case for a lure. Second, compare the address character by character with the official address published by the project or service the page claims to represent, using an independently sourced channel. Third, if the service claims to handle funds or offer financial products, confirm any claimed licence directly with the relevant regulator's public register. Fourth, confirm official support and contact channels through an independent route and not through this site. Fifth, an owner who believes the listing is wrong should audit the deployment for injected or replaced content and then request a review from the listing services. Evidence:

• Homepage: the page's identity claims are unsubstantiated, so the sole reliable reference is the official channel of the claimed service.
• Threat listings: the classification applies to the current hostname, so a different official domain would not carry the same flags.
• Hosting: the shared-platform subdomain model means anyone can publish under a similar-looking name, so any lookalike must be checked against official sources.

Summary Verdict

Authoritative evidence places this site at a critical level of risk. Independent, converging threat detections outweigh the neutral technical signals, and the page offers no content or identity evidence to counter them. It should be treated as a probable credential- or wallet-harvesting page until a reliable source shows otherwise. The identity of the operator is not independently established, and the site's legitimacy is not supported by the evidence.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge node, with the true origin server not observable. This is a mitigating factor only. It shows that the platform is mainstream, but it provides no verification of the content and cannot offset the reputation risk. Edge-only visibility also prevents independent verification of the hosting and allows content to be swapped quickly without any visible infrastructure change.

Closing Assessment

Interaction with this site should be limited to passive viewing at most. Credentials, wallet approvals, personal data, and funds should not be submitted, and nothing should be downloaded from it. Anyone who has already interacted with it should change affected passwords, review and revoke any wallet permissions, and report the page to the relevant platform or security service.