Is pimeru.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, platform-hosted site on a shared Cloudflare Pages subdomain. Its page title presents it as an "Ethereum Token Approval Checker" under the name Revoke.cash. It shows a short block of descriptive text and appears to offer a utility for reviewing and revoking cryptocurrency token spending permissions. A tool of this kind normally depends on the visitor connecting a crypto wallet. The operator is not identified anywhere in the captured material.

Scam/Impersonation Risk

The evidence shows confirmed adverse reputation. The host is currently blacklisted by several independent security engines, including a tier-one vendor, and an additional reputation indicator linked to phishing activity is recorded for it. This hard contradiction is the decisive factor in the assessment. The naming pattern adds to the concern. The homepage title copies the name of a well-known token-approval service, yet it sits on a generic platform subdomain rather than a domain of its own, and nothing in the captured material ties the site to that service. Token-approval utilities are a recognised lure for wallet-draining schemes, because a wallet signature can grant spending rights over a victim's assets. Sandbox testing did not observe wallet-connection prompts, clipboard tampering, hidden forms, credential forms posting to third parties, or outbound data transfers. That lowers the likelihood of an active drain mechanism during the test sessions but does not neutralise the blacklisting. The page also produced a high volume of console errors and loaded a moderate share of its resources from external origins. This is consistent with a hastily assembled or templated page, and bot-protection screening may have limited what the test sessions could observe. No contradictory legal identities were found, because no legal identity is stated. Evidence:

• Homepage: the title presents the site as a token-approval checker under a third-party service's name, while the host is a shared Cloudflare Pages subdomain.
• Reputation sources: multiple engines flag the host as malicious or suspicious, and an external blacklist confirms the listing.
• Behavioural sandbox: three successful runs recorded no external POST traffic, no wallet-provider interaction, no clipboard writes and no hidden forms, but they did record 42 console errors.
• Homepage: roughly 2,200 characters of text were captured, so the content footprint is thin.

Regulatory Verification Notes

The captured homepage names no legal entity, operator, jurisdiction, licence or registration number. Disclosure is unclear and ownership is opaque, which is a verification gap rather than a finding of misconduct. A token-approval utility is not a licensed financial service, but it carries custody-adjacent risk, so a clear accountable operator would be expected. No third-party broker or regulatory listing was matched, so there is no external regulatory signal in either direction. The site's real-world identity remains unverified. The legitimacy of the Revoke.cash name on this page is unconfirmed. Evidence:

• Homepage: no company name, address, licence number or legal-entity statement appears in the captured content.
• Transport encryption: the TLS certificate is DV-level, issued by YE1 and valid to 2026-12-23, about 58 days remaining. A DV certificate confirms domain control only and says nothing about operator identity.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).

What to Verify Next

Any link between this page and the Revoke.cash service should be checked by typing the official address manually or using a bookmark known to be genuine. Search-result links and messages that led to this page should not be trusted for that check. Anyone who has already connected a wallet or signed a transaction on this site should review their existing token approvals using a trusted, independently reached tool, and revoke any unrecognised permissions. Ownership and accountability for the site should be confirmed through the official channels of the brand it imitates. Official support and contact channels should be reached through an independent, offline route. Evidence:

• Homepage title: the Revoke.cash name must be matched against that service's officially published address.
• Reputation listings: current security-engine detections should be rechecked before any reassessment.
• Transport certificate: the DV certificate cannot confirm who operates the site.

Summary Verdict

The site's overall trust posture is critical. Confirmed blacklisting, combined with a brand-styled page on an anonymous platform subdomain and no accountable operator, outweighs the benign behaviour seen in sandbox testing. Its legitimacy is unsupported, and it falls in the highest-severity category for sensitive interactions.

Infrastructure Integrity

The site is delivered through a trusted CDN/WAF, with bot protection active and a valid TLS certificate. All observed addresses belong to the provider's edge network, and no origin server was observable. This mitigates technical exposure and indicates professionally managed delivery. It cannot offset the reputational listings, and edge-only visibility prevents independent confirmation of the real hosting and makes rapid content swaps harder to detect.

Closing Assessment

At most, the site should be viewed read-only. Wallets should not be connected, transactions or permission requests should not be signed, and no credentials or payment details should be entered. Where a token-approval check is needed, the officially published address of the genuine service should be used.