Is revoke-ostium.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a very recently registered domain whose homepage, when automatically inspected, returned only a security interstitial challenge ("Just a moment...") with a minimal amount of text, rather than any visible product, company, or service content. No business model, product, or operator can be read from the captured pages. The hostname pairs a token-approval-revocation term with a protocol-style name, a pairing that could suit a wallet-related utility, but nothing on the site confirms that purpose.

Scam/Impersonation Risk

The assessment is clearly cautionary because the domain is currently blacklisted by external threat-intelligence sources. Several independent detection engines flag it, two as malicious and three more as suspicious. One of the flagging engines is a widely used tier-one security vendor, which gives the listing real weight. These detections are the decisive factor in the assessment. A valid certificate and mainstream infrastructure do not offset them. The sensors did not confirm a conflicting legal identity or a specific named brand being impersonated. They also found no wallet-connection prompts, wallet-drainer behavior, clipboard manipulation, hidden forms, or password submission to outside parties. The risk therefore rests on the blacklisting and the site's profile, not on observed credential theft. That profile is a domain only months old, whose hostname wording suggests wallet or token-approval themes, and which shows heavy third-party network activity. In the sandbox sessions, nearly all requests in the busiest run went to external destinations, with many background data requests and a number of outbound posts. Every destination was on a known-benign list, and the site generated a notable number of browser console errors. Wallet-themed lures on young domains are a common route to credential and wallet-approval abuse, so the site should be treated as high-risk for any sensitive interaction. Evidence:

• Homepage: external reputation checks returned two malicious and three suspicious verdicts, including one from a tier-one security vendor, and the domain is on a confirmed blacklist.
• Domain registration: registered 2026-07-15 (~0.28 years old, about three months), expiring 2027-07-15.
• Homepage behavior: 27 external background requests and 9 external posts across three sandbox runs, all to known-benign destinations, with 12 console errors recorded.
• Wallet and form behavior: no wallet-connection, drainer, clipboard-hijack, or hidden-form activity observed.

Regulatory Verification Notes

The operator's real-world identity could not be independently connected to any person or organization, and ownership and governance are opaque. The homepage that was captured exposed no company name, licence, or registration details to evaluate. No third-party broker or regulatory-database match was found, which provides no regulatory standing either way. Because licensing and disclosure could not be assessed, the site cannot be treated as a regulated or supervised financial service. The domain was registered through NICENIC International Group Co., Limited, and its certificate is a basic domain-validated one. Both are administrative facts that say nothing about the operator's legitimacy. Evidence:

• Homepage: only a bot-challenge interstitial was captured, with no operator, licensing, or legal-entity disclosure on the page.
• Registration: registrar is NICENIC International Group Co., Limited.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-11 (45 days remaining).
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the site's claimed purpose and operator should be established through channels independent of the site itself, such as an official project or company page reached by a bookmark or a directly typed address. If the domain claims association with a DeFi protocol or any financial brand, that association should be confirmed from the brand's own verified channels. Any claimed licence or registration should be checked directly with the relevant registry. Official support and contact channels should be confirmed through an independent route. The current blacklist status should be re-checked with the listing sources, since a compromised or newly cleaned site can change status. Evidence:

• Homepage: no operator, product, or brand claim could be read from the captured page, so none can be taken at face value.
• Domain history: the domain is about three months old, so no long operating record exists to lean on.
• Reputation: the confirmed blacklist and the engine detections are current as of this analysis and may change.

Summary Verdict

The site sits in a high-risk posture, driven by confirmed external threat listings that outweigh every protective or neutral technical signal. Its apparent legitimacy cannot be established, and the available evidence gives no basis for treating it as a trustworthy counterparty. The assessment is firmly cautionary and security-forward.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, with all four observed addresses (IPv4 and IPv6) being Cloudflare edge servers, and its origin server was not observable. A bot-challenge layer gated the page. The edge-only visibility prevents independent verification of where the content is actually hosted, and it can mask changes to the content behind the edge. This protective infrastructure is a mitigating factor only, and it cannot offset the reputational risk.

Closing Assessment

Interaction should be limited to passive, read-only viewing at most. Credentials, wallet connections, token approvals, and payments should be withheld. Anyone who has already interacted with the site should review and revoke any wallet permissions or reused passwords through trusted tools.