Is mojiyarevisedtokks.pages.dev a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is an anonymous, auto-generated subdomain on a free developer hosting platform. It carries no brand, business or product identity. When the site was visited, no content was served. The visitor received a platform security interstitial titled as a suspected-phishing warning. The site presents no products, services or stated commercial purpose, so its only apparent function is as a disposable web endpoint of unknown operator and intent.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent detection engines, including a tier-one security vendor, currently flag the domain as malicious or suspicious, and the aggregated external reputation picture constitutes a confirmed blacklist condition. The interstitial served in place of the homepage is itself the infrastructure provider's suspected-phishing warning. That is a platform-level warning rather than an adjudicated finding, but it points the same way as the third-party detections. No conflicting legal-entity names were observed. No brand impersonation was established from page content, because no brand content was reachable. The behavioural sandbox did not observe wallet-drainer activity, clipboard manipulation, hidden forms or credential posts to external hosts. This does not offset the detections. The page was gated behind a bot challenge, so deeper behaviour was never exposed. The visit also showed heavy reliance on external requests and a high count of client-side errors. Throwaway subdomains of this type are widely used for short-lived phishing and lure pages, which makes the detections more credible. Evidence:

• Homepage: served a platform interstitial titled as a suspected-phishing warning (HTTP 403, bot-challenge gating), not site content.
• External reputation: 4 engines rated the domain malicious and 1 suspicious, including a tier-one vendor.
• Behavioural sandbox (3 of 3 runs completed): 28 external XHR/fetch requests, 4 external POSTs and 18 console errors, with no wallet-drainer, clipboard or hidden-form activity.
• Web archive: 1 snapshot, captured 2024-12-14 (about 1 year tracked), so there is no meaningful operating history.

Regulatory Verification Notes

The reviewable content names no legal entity, operator, licence or registration. Nothing was observed that links the site to a regulated institution, and no third-party broker or regulatory record matches it. The absence of such disclosures is a verification gap and not, on its own, evidence of wrongdoing. Here, however, it coincides with confirmed adverse reputation signals and an unverified identity. Ownership and governance are therefore opaque in substance, not just by administrative convention. A valid certificate does not alter this, because it attests only to encrypted transport and not to the operator's identity. Evidence:

• Homepage and legal pages: no company name, licence number, registry reference or contact identity was available in the content that could be reviewed.
• Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-22.
• Third-party broker dataset: no matching record.

What to Verify Next

Reputation should be re-checked against the primary threat-intelligence sources before any interaction, and the platform's warning status for the domain should be confirmed. Anyone who reached this address through an unsolicited message, advertisement or social-media post should return to the originating party over an independent, offline channel and confirm that this exact address is theirs. If the site claims to be a financial, trading or token service, the operator's claimed licence must be checked directly in the relevant regulator's own register, not via links on the site. Evidence:

• Homepage: the warning interstitial is the only content observed, so no claim made on the site could be validated.
• Identity: no real-world operator was independently linked to this domain.

Summary Verdict

The site sits at the high-risk end of the trust spectrum. Active adverse detections from independent sources, an unverified operator and the absence of any legitimate operating history converge on a clearly cautionary posture. Technical hygiene such as valid encryption and a mainstream hosting platform is the minimum a throwaway site can easily obtain. It does not indicate reliability and does not offset the reputation findings.

Infrastructure Integrity

The site is served entirely from Cloudflare edge infrastructure (AS13335, Cloudflare, Inc., US), and every observed address, IPv4 and IPv6, belongs to that network. The underlying origin host is not visible. This is a mitigating factor only. Protection from a major network reduces some exposure, but it is not evidence of legitimacy and cannot offset the external detections. The edge-only view also prevents independent verification of where the content is actually hosted.

Closing Assessment

Sign-in, credential entry, wallet connection and any payment or transfer of funds should be avoided. If the address must be examined, it should be opened only from an isolated, non-production environment, and nothing should be downloaded from it.