---
title: "Is roostwtf.pages.dev Safe? Trust Score 52/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "roostwtf.pages.dev"
verdict: "Moderate Trust"
title: "Is roostwtf.pages.dev Safe? Trust Review, 52/100"
trust_score: 52
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/roostwtf.pages.dev
assessed: 2026-10-26
---

# Is roostwtf.pages.dev safe? TrustSniffer's moderate-trust assessment: 52/100

## Verdict


**Verdict: Moderate Trust, trust score 52/100.** roostwtf.pages.dev is moderately trusted.

Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-26 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.1 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (8 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the roostwtf.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/roostwtf.pages.dev/screenshots/first.png)

_What roostwtf.pages.dev served when TrustSniffer captured it on 2026-10-26. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

The website is a single-page site published on a free subdomain of a developer hosting platform, titled "$ROOST", whose name and branding suggest a token-themed or community-style project. It presents a short landing page with a moderate amount of text. Its apparent purpose is to promote or provide an entry point to a crypto-token-style venture, though the captured material does not clearly establish a business model or operator.


### Scam/Impersonation Risk

This is the decisive area of concern. The domain is **currently blacklisted** by external threat-intelligence sources. Two independent engines classify it as malicious and a third as suspicious, and historical threat records also associate the domain with phishing-type activity. A third-party reputation signal of this kind is the strongest contradiction in the file. It raises the risk of sensitive interaction well above what the site's otherwise orderly technical presentation would suggest. No conflicting legal entities and no brand impersonation were observed, and no malicious on-page behaviour was captured in the sandbox runs. No wallet-drainer routines, clipboard manipulation, hidden forms, credential posts to external hosts, or content cloaking were seen. The page does generate heavy third-party traffic: roughly half of its network requests go to external hosts, with dozens of external background fetches, a dozen external POST submissions, a few destinations outside the commonly recognised set, and repeated script errors on load. For a page this small, that pattern is out of proportion and could conceal data flows or tracking, so the reputational flags cannot be dismissed as noise. Sites in this archetype, a token-branded page on disposable free hosting, are a common vehicle for short-lived promotion and wallet-targeting campaigns. Evidence:

- Homepage and domain reputation: two external engines flag the domain as malicious, one as suspicious, and it appears on an external blacklist.
- Homepage runtime behaviour: 78 external XHR/fetch calls, 12 external POSTs, about 52% of requests directed to external hosts, 3 non-allow-listed destinations, and 8 console errors across 3 sandbox runs.
- Homepage interaction tests: no wallet-connection abuse, clipboard writes, hidden forms, or cloaking detected.
- Web-archive record: 8 snapshots between September 2024 and March 2025, about 2 years tracked, with continuous content and no repurposing detected.

### Regulatory Verification Notes

The sampled homepage names no operating company, licence, registration number, or jurisdiction, and the disclosure position remains unclear. Real-world operator identity has not been independently established, so the site cannot be treated as tied to any identifiable, accountable entity. No third-party broker or regulatory-database match exists, so no external reputational context is available in either direction. The absence of a licence is a verification gap, not proof of wrongdoing, but here it compounds the reputation concerns rather than standing alone. The sound transport encryption and orderly technical posture are consistent with a functioning site and do not establish legitimacy or accountability. Evidence:

- Homepage: no legal entity, licence, registration, or physical address is stated in the captured content.
- Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-13.
- Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Before any interaction, the operator should be identified through an independent route. That means checking whether any named team, company, or token issuer can be traced outside the site itself, and whether it holds registrations or licences in a relevant jurisdiction. Any social-media or community links should be confirmed from the project's own independent channels, not from this page. If the site is a token or investment-related venture, the token contract and any claimed audits should be checked on public blockchain explorers and with the auditors directly. Official contact channels should be confirmed offline. The site owner should also be asked to explain or remediate the external reputation flags, since a compromised page could produce the same signals. Evidence:

- Homepage: no named team, company, or verifiable project documentation in the captured content.
- Reputation record: the blacklisting is unresolved, and its cause (malicious use or compromise) is not established.
- Hosting model: the free-platform subdomain provides no independent ownership anchor.

### Summary Verdict

Overall, the assessment is cautionary. Conventional technical hygiene and an unbroken but short archive history are outweighed by confirmed adverse reputation and unverified operator identity. The posture is elevated risk for any sensitive action. Passive viewing is the only use consistent with the evidence.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF, and every observed address is an edge node, so the origin server is not visible. This offers some protection against direct attacks and indicates mainstream, well-run delivery infrastructure. It is a mitigating factor only. Edge-only visibility also prevents independent hosting verification and makes rapid content swaps harder to detect, and the infrastructure cannot offset the reputational findings.


### Closing Assessment

Account logins, credential entry, wallet connections, and any financial transactions on this site should be avoided until the external threat flags are cleared and the operator's identity is independently confirmed. Any visit should be limited to read-only viewing, from a device and browser profile that holds no valuable assets or saved credentials.


_Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)
- The page sent data to other domains many times while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_POSTS_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of roostwtf.pages.dev.

- The request stayed on roostwtf.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-09-08. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2cd4 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-13 |
| Domain age | 2.13 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-09-08 |
| Archive snapshots | 8 |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about roostwtf.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [tor-bgc.pages.dev](https://trustsniffer.com/report/tor-bgc.pages.dev), a similar name (Moderate Trust, 50/100)
- [pepepenny.pages.dev](https://trustsniffer.com/report/pepepenny.pages.dev), a similar name (Moderate Trust, 54/100)
- [crudoprotocol-dashboard.pages.dev](https://trustsniffer.com/report/crudoprotocol-dashboard.pages.dev), a similar name (Moderate Trust, 52/100)
- [xexchanger.pages.dev](https://trustsniffer.com/report/xexchanger.pages.dev), a similar name (Moderate Trust, 52/100)
- [polterfinance.pages.dev](https://trustsniffer.com/report/polterfinance.pages.dev), a similar name (Moderate Trust, 55/100)
- [dapps3node.pages.dev](https://trustsniffer.com/report/dapps3node.pages.dev), a similar name (Moderate Trust, 56/100)
- [wwwworrrk.pages.dev](https://trustsniffer.com/report/wwwworrrk.pages.dev), a similar name (Moderate Trust, 52/100)
- [almanak-tges.pages.dev](https://trustsniffer.com/report/almanak-tges.pages.dev), a similar name (Moderate Trust, 57/100)
- [backaniang.com](https://trustsniffer.com/report/backaniang.com), another site assessed as moderate-trust (Moderate Trust, 65/100)
- [bdstudyworld.com](https://trustsniffer.com/report/bdstudyworld.com), another site assessed as moderate-trust (Moderate Trust, 70/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/roostwtf.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/roostwtf.pages.dev · assessed 2026-10-26.*