Is zugchain.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site published on a free subdomain of a shared static-hosting platform. Its name points to a blockchain-themed project. The homepage carries a substantial body of text content, but the observed evidence does not establish a specific product, service, or business model, and no operating entity is tied to it.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Several major security vendors independently flag the site as malicious, and a number of further engines rate it suspicious. The volume of detections is high enough that the site is treated as having a confirmed blacklist listing. The evidence does not show phishing, brand impersonation, or conflicting legal identities, so the listing rests on the external detections themselves. The sandbox also found concealed form elements on the homepage in every test session. Pages that hide form fields are a recognised pattern for covert data capture, though the sandbox saw no submission to outside destinations. Some features of crypto-drainer pages were absent: no wallet-connection prompts, no clipboard manipulation, and no content cloaking. That absence does not offset the vendor detections. The domain is also very young and has almost no history, so there is no record of legitimate operation to weigh against the detections. On this basis, any interaction that involves credentials, wallets, or funds carries elevated risk. Evidence:

• Homepage reputation scan: 12 malicious and 3 suspicious verdicts, including three leading endpoint-security vendors.
• Homepage sandbox: hidden form elements were detected in 3 of 3 runs, with no external form posts, no wallet-drainer behaviour, and no clipboard writes.
• Domain provenance: first observed 2026-07-05 (~119 days, ~0.33 years old), with a single archive snapshot (2026) and no continuous history.
• The evidence contains no conflicting legal-entity names.

Regulatory Verification Notes

The evidence contains no licensing statement, registered company name, or regulator reference that could be assessed, and the operator remains unidentified. Ownership details are incomplete, and the real-world identity behind the site is not independently verified. A valid certificate and mainstream hosting show only that basic technical hygiene is in place. They do not show legitimacy. No third-party broker or regulatory record matched the site, so no external reputational signal exists in either direction. This section reflects disclosure transparency only. The risk conclusion above rests on the threat detections, not on the absence of licensing information. Evidence:

• Homepage and site-wide: no company name, licence, or registration identifier was found in the evidence.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-04.
• No third-party broker reputation record matched the domain.

What to Verify Next

Before any engagement, confirm through an independent route whether a legitimate project of this name exists and which web address it officially publishes. Compare that address character by character with this one, since a free shared subdomain is easy to create and imitate. Ask the project for its legal entity name and any licence or registration claim, then check these against the relevant public registry. Confirm the official support and contact channels offline. Re-check the site's security reputation later, because the listing may change if the content is cleaned up or taken down. Evidence:

• Homepage: the site presents no verifiable operator or registry reference to check against.
• Domain: a free subdomain on a shared hosting platform gives no registration-based proof of who controls the site.
• Detections: the current vendor flags apply to the domain as it stands today.

Summary Verdict

The overall posture is critical and clearly cautionary. Broad, corroborated security detections and concealed form behaviour dominate the assessment, and the domain's youth and lack of history leave nothing to offset them. Basic technical hygiene does not outweigh these signals, and the site's identity remains unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers and the origin host is not observable. This is a mitigating factor for availability and resilience only. It cannot offset the reputation risk, and it prevents independent verification of the true hosting location.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any payment or financial activity. At most, treat it as read-only, preferably from an isolated environment, and download nothing from it.