---
title: "Is earntit.pages.dev Safe? Risk Report, Score 48/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "earntit.pages.dev"
verdict: "Low Trust"
title: "Is earntit.pages.dev Safe? Warning Signs, Score 48/100"
trust_score: 48
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/earntit.pages.dev
assessed: 2026-10-26
---

# Is earntit.pages.dev safe? TrustSniffer's low-trust assessment: 48/100

## Verdict


**Verdict: Low Trust, trust score 48/100.** earntit.pages.dev is low-trust and potentially risky.

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-26 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.6 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (28 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the earntit.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/earntit.pages.dev/screenshots/first.png)

_What earntit.pages.dev served when TrustSniffer captured it on 2026-10-26. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This is a single-page website on a shared pages.dev hosting subdomain. Its homepage is titled "Killer GF NFTs by Zeronis" and presents a short NFT-themed page, with about 1,800 characters of visible text. The apparent purpose is NFT promotion or sale under a creator or brand called Zeronis. The captured material does not show a clear product catalogue, pricing, or minting mechanics, so the business model cannot be confirmed from the evidence.


### Scam/Impersonation Risk

The decisive concern is **external threat reputation**. Multiple independent threat-intelligence engines currently flag the domain as malicious, with an additional engine rating it suspicious, and an external blacklist listing is confirmed. This is a confirmed blacklist hit, and it is the principal reason for the elevated-risk posture. No conflicting legal identities and no brand impersonation were observed. No phishing-page classification was returned either. The risk therefore rests on the reputational listings, not on proven deception. The site's own behaviour is only partly reassuring. Sandbox runs found no wallet-connection prompts, wallet-drainer routines, clipboard manipulation, hidden forms, credential posts to external hosts, or content cloaking. However, the page loaded an unusually large share of its resources from third-party origins and produced a high volume of script errors. It also showed heavy page-structure changes after interaction. For an NFT-themed page, this pattern is consistent with a dynamically assembled front end, and it can mask later content changes. The absence of drainer behaviour in the sandbox runs does not offset the active threat listings. Evidence:

- Homepage: titled as an NFT collection by "Zeronis", with limited visible text and no verifiable product or operator detail.
- Threat reputation: two engines rate the domain malicious and one rates it suspicious. An additional external blacklist also lists it.
- Behavioural testing (3 of 3 runs successful): 63 external XHR/fetch requests (81.4% external share), all to allow-listed destinations. 27 console errors and 601 DOM mutations after interaction. No wallet, clipboard, hidden-form or cloaking indicators.
- Archive provenance: 28 snapshots between 2024-01-27 and 2025-03-04 (2 years tracked, no gaps). Domain age is about 2.6 years.

### Regulatory Verification Notes

The captured material contains no licensing statement, registration number, legal-entity name, or jurisdiction. This is a verification gap rather than evidence of wrongdoing, and it matters more here because the site is NFT-themed and could involve digital-asset sales. Automated page-level identity analysis was unavailable, so the operator's real-world identity is **unverified**. The site is presented through a shared hosting subdomain rather than an independently registered brand domain, which adds to the **ownership opacity**. No broker-reputation database entry matched the domain, so there is no third-party regulatory signal in either direction. Evidence:

- Homepage: no legal-entity, licence, or registration disclosure appears in the captured content.
- Hosting: served from AS13335 (Cloudflarenet, Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2027-01-13. DV confirms domain control only, not the operator's identity.
- Digital-asset recognition: the domain is not listed in a DeFi protocol directory, so there is no recognised protocol or TVL to corroborate it.

### What to Verify Next

Before any engagement, an independent party should establish who actually operates the "Killer GF NFTs" project. This means looking for an official creator presence, such as a verified social account or marketplace collection page that links back to this domain. The domain's threat listings should be rechecked later for removal or confirmation, because a cleared listing would change the picture and a persistent one would confirm it. Any claimed collection, token, or contract address should be checked on a public blockchain explorer. Confirm that the contract exists, who deployed it, and whether it matches what the site advertises. Finally, official support and contact channels should be confirmed through an independent route, not through links on the page. Evidence:

- Homepage: the NFT collection title is the only identifying claim, so it should be matched against marketplace and creator records.
- Archive history: the domain has about two years of continuous snapshots, so earlier captures can be compared with the current page for content changes.
- Behavioural testing: the post-interaction page-structure changes and third-party-heavy loading make it worth re-testing the page later.

### Summary Verdict

The overall posture is **elevated risk with a cautionary assessment**. Some supporting hygiene is present, including a valid certificate, an identifiable network provider and a continuous archive record. It does not outweigh the current external threat listings or the unverified identity. The site cannot be treated as trustworthy.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address, so the origin server is not observable. This provides standard transport and availability protection and is a mitigating factor only. It does not establish legitimacy. Edge-only visibility also prevents independent verification of the true hosting and can mask rapid content swaps, so the protection cannot offset the reputation risk.


### Closing Assessment

The site should be limited to passive viewing. Account creation, credential entry, wallet connection, and any payment or asset transfer should be avoided until independent confirmation of the operator and a clearing of the external threat listings.


_Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of earntit.pages.dev.

- The request stayed on earntit.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-01-27. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2cbd |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-13 |
| Domain age | 2.58 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-01-27 |
| Archive snapshots | 28 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about earntit.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [snapshots-pendlefinance-102.pages.dev](https://trustsniffer.com/report/snapshots-pendlefinance-102.pages.dev), a similar name (Low Trust, 35/100)
- [xaman-promo.pages.dev](https://trustsniffer.com/report/xaman-promo.pages.dev), a similar name (Low Trust, 25/100)
- [kinetiq-com.pages.dev](https://trustsniffer.com/report/kinetiq-com.pages.dev), a similar name (Low Trust, 25/100)
- [en-flareportal.pages.dev](https://trustsniffer.com/report/en-flareportal.pages.dev), a similar name (Low Trust, 25/100)
- [apeb0nd.pages.dev](https://trustsniffer.com/report/apeb0nd.pages.dev), a similar name (Low Trust, 34/100)
- [stake-stone.pages.dev](https://trustsniffer.com/report/stake-stone.pages.dev), a similar name (Low Trust, 36/100)
- [linktr-portalgamingpp.pages.dev](https://trustsniffer.com/report/linktr-portalgamingpp.pages.dev), a similar name (Low Trust, 38/100)
- [allocation-orbiterfinance.pages.dev](https://trustsniffer.com/report/allocation-orbiterfinance.pages.dev), a similar name (Low Trust, 50/100)
- [futuretechsoftwares.com](https://trustsniffer.com/report/futuretechsoftwares.com), another site assessed as low-trust (Low Trust, 32/100)
- [daugiametes.lt](https://trustsniffer.com/report/daugiametes.lt), another site assessed as low-trust (Low Trust, 40/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/earntit.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/earntit.pages.dev · assessed 2026-10-26.*