Is thedogeverse-live.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page promotional site titled "Dogeverse | Making Doge Memes Multichain." It is served from a subdomain on a shared web-publishing platform rather than a standalone branded domain. It presents itself as a meme-token project, a "Doge"-themed brand pitched around multichain reach. Its apparent purpose is to attract visitors into a crypto-asset community or token ecosystem, though the captured evidence does not establish a concrete product, operator, or business model.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors independently classify the site as malicious, and the combined detection count places it in a confirmed blacklist condition. No conflicting legal identities and no brand-impersonation or phishing-page indicators were observed, so the elevated risk rests on the external threat detections rather than on identity inconsistency. The site is also a young property on a shared hosting namespace. Its name and format fit the meme-token archetype, a category in which disposable, short-lived sites are common. Behavioural testing observed no wallet-draining routines, clipboard manipulation, hidden forms, credential forms posting to external hosts, or content cloaking. That is a mitigating observation, but it does not offset the detections. The page loads heavily from external sources, issuing dozens of cross-origin requests and several external POST submissions. It also logged a high volume of script errors, which suggests an unstable or templated build. Detection-based classifications can follow a compromise or a later content swap, so the clean behaviour seen in the test runs does not guarantee clean behaviour at other times. Evidence:

• Homepage: security vendors including Fortinet, Kaspersky and Sophos flag the site, with 16 malicious and 1 suspicious verdicts across the engines evaluated.
• Homepage behaviour: 38 external XHR/fetch requests and 3 external POSTs were recorded across 3 successful runs, none to non-whitelisted destinations, with 39 console errors and no wallet-connect, drainer, clipboard-write, or cloaking activity.
• Domain provenance: first observed in the web archive in September 2024 (~2 years old), with 13 snapshots across 2024–2026 (3 years tracked).

Regulatory Verification Notes

The captured homepage presents no identifiable legal entity, licence, or registration reference, and the on-page disclosure position is unclear. No regulator or third-party registry matched the site, and no broker-reputation record exists for it. Because the operator is unidentified, nothing links the site to an accountable, supervised business. This is a transparency gap that compounds the cautionary posture set by the threat detections. It is not itself evidence of wrongdoing. Independent identity confirmation could not be established from the available evidence. Evidence:

• Homepage: no company name, licence, or registration number is stated on the captured page.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-10 with 49 days remaining. A DV certificate confirms domain control, not operator identity.

What to Verify Next

Until the external detections are cleared, the site should not be used for anything beyond passive viewing. Any claim of an official Dogeverse project should be checked against channels reached independently of this site, such as a separately sourced project listing or an established community channel. Detection status should be re-checked with the individual security vendors after a reasonable interval, since a cleared listing would indicate remediation or a false positive. No wallet connection, signing request, or credential entry should be attempted on this site. The official contact channels of any project it claims to represent should be confirmed through an offline or independently sourced route. Evidence:

• Homepage: the title claims a multichain meme-token project, but no operator, contract reference, or verifiable team information is presented.
• Detection status: the malicious verdicts are current as of this analysis and should be re-checked against each vendor's own lookup.
• Archive history: the 13 snapshots show continuous but shallow history, so the domain's track record is short and cannot yet support a reputational baseline.

Summary Verdict

The site sits in an elevated-risk posture. Confirmed blacklisting by multiple independent security vendors is the decisive factor and outweighs the technically clean basics such as valid encryption, a stable hosting presence, and continuous short-term history. The operator is unidentified, and the site cannot be treated as a trustworthy counterparty for sensitive interactions.

Infrastructure Integrity

The site is fronted by Cloudflare (AS13335, US), and every observed address is a CDN edge node. The origin server is not visible. This is a mitigating factor for availability and basic transport hygiene, but it prevents independent verification of where the content is actually hosted. It also means content can be swapped quickly behind a stable edge address. Protective infrastructure cannot offset the reputational detections and is not evidence of legitimacy.

Closing Assessment

Interaction should be limited to read-only viewing, if it occurs at all. No wallet connection, login, credential entry, or payment or token transaction should be made on this site while the external detections stand.