---
title: "Is everrevoke.pages.dev a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "everrevoke.pages.dev"
verdict: "Critical Risk"
title: "Is everrevoke.pages.dev a Scam? Risk Report, Score 5/100"
trust_score: 5
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/everrevoke.pages.dev
assessed: 2026-10-22
---

# Is everrevoke.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** everrevoke.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 15 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Listed as unsafe (Google) | Risk |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.1 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (8 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the everrevoke.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/everrevoke.pages.dev/screenshots/first.png)

_What everrevoke.pages.dev served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a subdomain site on a shared static-hosting platform, and the page served to a visitor is not ordinary site content. The capture returned an automated security interstitial titled as a suspected-phishing warning. That page carries little readable material, so the site's own purpose, products and business model cannot be established from what it presents. The evidence points to a throwaway-style deployment on a free hosting namespace rather than an established branded service.


### Scam/Impersonation Risk

This site carries **confirmed contradictory signals** and warrants a clearly cautionary stance. A major browser-safety service currently flags it for social engineering, and a substantial group of independent security engines, including several top-tier vendors, classify it as malicious. Together these amount to a confirmed **blacklist** condition. This is the decisive finding and outweighs every neutral or favourable technical attribute. No conflicting legal identities were observed, and no brand impersonation was established from page content, because no readable brand content was captured. The danger therefore rests on the threat-intelligence listings rather than on any visible storefront or product claim. Behavioural testing adds context but is not itself incriminating. The page triggered a large volume of third-party requests, including several outbound POST submissions, and generated repeated console errors. It also showed heavy DOM churn after interaction. All outbound destinations were on recognised, whitelisted services. No wallet-connection prompts, wallet-drainer behaviour, clipboard hijacking, hidden forms or external password forms were detected. Those clean behavioural results do not offset the independent malicious listings. Phishing pages commonly sit behind interstitials and challenge layers that hide their payload from scanners. Evidence:

- Homepage: the page served was a phishing-warning interstitial returning an access-denied response behind a bot challenge, with only a short body of text.
- Reputation: the browser-safety service flags the site under the social-engineering category, and 15 security engines mark it malicious with one more suspicious.
- Sandbox behaviour: 83 external XHR calls and 5 external POSTs, all to whitelisted destinations, with 16 console errors and no wallet, clipboard or hidden-form activity.
- Domain provenance: registered about 2.1 years ago, with 8 archive snapshots spanning 2024–2025 (2 years tracked), which shows continuity but no established history.

### Regulatory Verification Notes

No licence, registration number or legal-entity disclosure could be assessed, because no legal, terms or about page content was captured. No financial-services or regulated-entity claim was observed, and no third-party broker-reputation match exists for this name. Operator identity is not independently verified, and ownership opacity applies. That is an administrative limitation and is not the basis of the elevated assessment. Registration through a free shared-hosting namespace gives no standalone corporate identity to validate. The transport layer is technically sound, but a domain-validated certificate only confirms control of the hostname. It says nothing about the operator's legitimacy. Evidence:

- Technical telemetry: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-09.
- Brokerage and regulatory data: no regulator match and no third-party broker-reputation entry for this site.

### What to Verify Next

Anyone who reaches this site through a message, advertisement or search result should confirm independently where the link came from. If it purports to represent a known brand or service, they should locate that brand's official site through a typed address or an offline source and compare it with this one. They should not follow links from the originating message. Any account, payment or document request linked to this address should be treated as unverified until the sender confirms it through a separate channel. The site owner should confirm whether the project is under their control, and should contact the hosting platform and the listing authorities to request a review if it is. Evidence:

- Hosting namespace: the site sits on a shared platform subdomain, so the address alone does not identify a legal operator.
- Current listings: the safe-browsing flag and the multi-engine detections are active now and have not been cleared.
- Page content: the visible text is a platform warning, not operator-authored material, so no official contact channel was captured.

### Summary Verdict

The overall posture is **high risk**. Active, convergent threat-intelligence listings are decisive, and the site's technical hygiene and the limited continuity in its archive history cannot offset them. Operator identity is unverified, so no claim of legitimacy can be supported.


### Infrastructure Integrity

The site is served entirely from a major CDN and WAF with bot-challenge protection active, and every observed address is an edge node. The origin server was not observable, so independent hosting verification is not possible. Protective infrastructure is a mitigating factor only. It does not reduce the reputational risk, and the same edge layer can mask rapid content changes behind a stable address.


### Closing Assessment

Treat the site as unsafe for sign-in, credential entry, payments and file downloads, and do not interact with it beyond passive viewing, if at all. Any link that leads here should be reported to the person or platform that sent it.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of everrevoke.pages.dev.

- The request stayed on everrevoke.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-09-03. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f6d |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-09 |
| Domain age | 2.13 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-09-03 |
| Archive snapshots | 8 |
| Reputation | VirusTotal: 15 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 1 match |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about everrevoke.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [ghost-holding.pages.dev](https://trustsniffer.com/report/ghost-holding.pages.dev), a similar name (Critical Risk, 0/100)
- [thoreum-capital.pages.dev](https://trustsniffer.com/report/thoreum-capital.pages.dev), a similar name (Critical Risk, 0/100)
- [tydro-votings-com.pages.dev](https://trustsniffer.com/report/tydro-votings-com.pages.dev), a similar name (Critical Risk, 0/100)
- [fomovotes-45.pages.dev](https://trustsniffer.com/report/fomovotes-45.pages.dev), a similar name (Critical Risk, 0/100)
- [fomovotes-44.pages.dev](https://trustsniffer.com/report/fomovotes-44.pages.dev), a similar name (Critical Risk, 0/100)
- [yesmft-whitelisting.pages.dev](https://trustsniffer.com/report/yesmft-whitelisting.pages.dev), a similar name (Critical Risk, 16/100)
- [runes-ord.pages.dev](https://trustsniffer.com/report/runes-ord.pages.dev), a similar name (Critical Risk, 7/100)
- [xpfunxyz.pages.dev](https://trustsniffer.com/report/xpfunxyz.pages.dev), a similar name (Critical Risk, 0/100)
- [flocmaterials.shop](https://trustsniffer.com/report/flocmaterials.shop), another site assessed as critical-risk (Critical Risk, 0/100)
- [summitcapitalpatners.info](https://trustsniffer.com/report/summitcapitalpatners.info), another site assessed as critical-risk (Critical Risk, 14/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/everrevoke.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/everrevoke.pages.dev · assessed 2026-10-22.*