Is wqerweq.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site on a free Cloudflare Pages subdomain with a randomly generated name. When automated analysis loaded its homepage, the visitor was served a blocking interstitial titled as a suspected-phishing warning rather than any branded content. The captured page held only a short block of text and no product, service or business description. Its apparent purpose therefore cannot be established from the site itself, and the available evidence points to a throwaway deployment that has been flagged as deceptive.

Scam/Impersonation Risk

The principal finding is a set of converging external threat detections. The domain is currently blacklisted by a major browser-safety service under a social-engineering classification, and several established security vendors independently rate it malicious. These findings outweigh every neutral or favourable technical attribute. No specific brand impersonation and no conflicting legal identities were observed, because the site exposes no identity content that could be compared. The risk therefore rests on reputation and platform-level flagging, not on a documented copy of a named brand. The homepage capture returned an access-denied response with a phishing warning, which fits a deployment taken down or challenged for abuse. The single abuse report on record concerns a shared edge address belonging to the infrastructure provider, not this site, and carries no weight against it. Behavioural testing found no wallet-connection prompts, clipboard tampering, hidden forms or credential posts to outside parties. That does not offset the active blacklisting, because a page that blocks automated visitors can show different content to real users. Evidence:

• Homepage: the response was a blocking challenge page titled as a suspected-phishing warning, with an access-denied status and about 381 characters of text.
• Reputation: the domain is on a major browser-safety blacklist (social-engineering category) and 8 security engines rate it malicious, with 1 more rating it suspicious.
• Behaviour: three sandbox runs saw 22 external background requests, 4 external form or data posts and 18 console errors. No wallet, clipboard or hidden-form activity was detected.
• Abuse database: 1 report, filed against a shared CDN edge IP and discounted as infrastructure noise.

Regulatory Verification Notes

The only page captured was the warning interstitial. It names no operator, company, registration number or licence, and it offers no legal, terms, privacy or about content to assess. No third-party broker or regulator record matched this domain. This is a verification gap on a page that carries no business content, not evidence of wrongdoing in itself. The real-world operator is unverified, and nothing here supports treating the site as a regulated or licensed entity. The transport-layer facts are routine and confer no legitimacy. A valid certificate from a mainstream issuer is available to any deployment on this platform, including abusive ones. Evidence:

• Legal and identity pages: none were retrievable; the captured page shows no operator or licence disclosure.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Transport encryption: the TLS certificate was issued by WE1 at domain-validated (DV) level and is valid to 2027-01-07.
• Third-party broker dataset: no match for this domain.

What to Verify Next

Anyone who reached this address through an email, message, advertisement or QR code should treat that source as suspect. They should confirm the sender's claimed organisation through an independent route, such as an official number or a manually typed official domain. The current listing status should be rechecked directly with the browser-safety service before any further access. The hosting platform's abuse desk can confirm whether the project has been suspended or reported. If a legitimate business claims this address, it should show proof of control over the project and the delisting outcome before any interaction. Official support and contact channels should also be confirmed through an offline route. Evidence:

• Homepage: the suspected-phishing interstitial indicates the platform or its protection layer has already challenged this address.
• Reputation: the browser-safety blacklist entry and the malicious ratings from several vendors are the current status to recheck.
• Identity: no operator is named on any captured page, so ownership claims cannot be validated from the site.

Summary Verdict

This website is assessed as critically untrustworthy. Active, independent threat detections define its posture, and the accompanying behaviour and identity evidence offers nothing that could credibly offset them. Real-world operator identity is unverified, and the site's legitimacy cannot be inferred from its technical presentation.

Infrastructure Integrity

The site sits behind a trusted CDN and web-application firewall, and all four observed addresses are provider edge servers. The true origin host was not observable. This is a mitigating factor only, because shared edge infrastructure also hosts abusive content and the active threat detections cannot be offset by it. It does prevent independent hosting verification, and it allows content to be swapped without any visible change to the address.

Closing Assessment

The site should not be used for login, credential entry, payments or file downloads. At most it should be viewed passively from an isolated, non-sensitive environment. Any message that directed a user here should be reported to the sender's real organisation and to the platform's abuse channel.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 2606:4700:310c::ac42:2f83 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.