---
title: "Is thoreum-capital.pages.dev a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "thoreum-capital.pages.dev"
verdict: "Critical Risk"
title: "Is thoreum-capital.pages.dev a Scam? Trust Review, 0/100"
trust_score: 0
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/thoreum-capital.pages.dev
assessed: 2026-10-20
---

# Is thoreum-capital.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** thoreum-capital.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-20 by automated analysis. Classification confidence 75%.

| Field | Value |
| --- | --- |
| What this site appears to be | A crypto token promotion page for THOREUM that pushes 'Instant Bond' purchases with a claimed 10% instant profit, APY up to 200%, and projected x100 gains. It uses a countdown timer, 'Limited offer' urgency, and unverified audit and ecosystem payout claims, with no verifiable legal entity, contact details, or risk disclosure. The burn narrative contradicts itself, since the daily burns were stated to end in March 2024. Financial-gain claims lack the required proof, so the page is high risk. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 4 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.2 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (16 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the thoreum-capital.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/thoreum-capital.pages.dev/screenshots/first.png)

_What thoreum-capital.pages.dev served when TrustSniffer captured it on 2026-10-20. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

THOREUM Capital is a single-page crypto token promotion site that sits on a free pages.dev subdomain. It presents the THOREUM token as an "AI Powered Store of Value & Hyper Deflationary Token", with prominent calls to connect a wallet, buy through an "Instant Bond", migrate, or claim. Its apparent business model is to draw deposits into token bonding and a "Thoreum Bank" yield scheme. Returns are said to come from token demand and revenue sharing across an unverified ecosystem.


### Scam/Impersonation Risk

The domain is **blacklisted**, and the blacklisting is the decisive finding. Several independent security engines, including a tier-one engine, currently flag the domain as malicious, and the aggregated external reputation check confirms the listing. No brand impersonation, phishing form, or conflicting legal identity was observed. The risk comes from the offer itself and from the external detections. The homepage promises an "Extra 10%++ profit" on the Instant Bond, "Thoreum Bank" APY of up to 200%, and projected x100 gains. It also uses "Sure Bet" language and says the token will "probably catch BTC this year". These are guaranteed-return and aggressive-yield claims, and the page asks for deposits before any service is delivered. The pressure tactics include a countdown timer, "Limited offer!" banners, and a wallet-connect prompt. The page names Certik and Paladin as auditors without linking to any report. It also claims 50% revenue sharing across an ecosystem without showing where the money comes from. The burn narrative contradicts itself. The page announces that the 1% daily supply burns ended on 17 March 2024, yet it still advertises "99.99% supply burned" and "Hyper Deflationary" status. This is a claim-versus-evidence mismatch typical of high-yield investment programmes. Nothing in the evidence shows that wallet-draining or clipboard-hijacking behaviour occurred during sandbox runs. The financial mechanics and the confirmed external detections are the primary hazards. Evidence:

- Homepage: promises a 10% instant bond profit, APY up to 200%, and x100 projections alongside a countdown timer and "Limited offer" urgency.
- Homepage: lists Certik and Paladin audits and ecosystem payouts with no verifiable report or link, and contradicts itself on whether burns have ended.
- Domain provenance: a roughly 2.2-year-old pages.dev subdomain, with 16 archive snapshots spanning 2024–2026 (3 years tracked).
- External reputation: four security engines rate the domain malicious, including one tier-one engine, and the domain appears on a confirmed external blacklist.

### Regulatory Verification Notes

The site shows no legal entity name, licence, registration number, physical address, or contact channel. It also carries no risk disclosure, even though it solicits token purchases and yield deposits. Beyond the missing disclosures, the domain is a free-hosting subdomain with no independently identifiable owner, so the real-world operator cannot be connected to the offer. The site gives no basis for treating it as a regulated activity. No third-party broker or regulator database match was found, and that absence is not a reputational finding in itself. Because the blacklist hits and the guaranteed-return promises are present, these gaps compound the concern. They are not minor administrative omissions. Evidence:

- Homepage: no company name, licence authority, registration number, address, or complaints route is presented anywhere on the page.
- Homepage: investment-style claims appear with no risk warning or terms of participation.
- Hosting: served from AS13335 (Cloudflare, US), and the TLS certificate is DV-level, issued by WE1 and valid to 2026-12-10.

### What to Verify Next

Any claim of auditing should be confirmed directly with the named audit firms through their own official publications, because the site provides no report links. The token's actual contract, supply, and burn history should be checked on an independent blockchain explorer. The explorer data should be compared with the "99.99% burned" claim and the announcement that burns ended in March 2024. The operator's identity and any licence should be confirmed with the relevant financial regulator's public register in the user's jurisdiction. Official communication channels should be identified through independent, offline routes, not through links on this page. Evidence:

- Homepage: the audit and ecosystem-payout claims carry no verifiable references.
- Homepage: the contradictory burn statements can be tested against on-chain data.
- Legal and contact information: nothing on the page can be traced back to an identifiable operator.

### Summary Verdict

The available evidence points to a high-risk, untrusted site. Confirmed external detections and a guaranteed-return investment model drive that assessment. Technical hygiene does not offset the risk, and the operator's real-world identity remains unverified. The site is classified as unsafe for any financial or credential-based interaction.


### Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF. All four observed IP addresses are edge servers, and the origin host was not observable. This protective layer is a mitigating factor only and says nothing about the legitimacy of the operator. The edge-only view also prevents independent verification of the real hosting and allows content to be swapped without notice. The infrastructure therefore cannot offset the reputation risk from the external detections.


### Closing Assessment

The site should be treated as hostile. Wallets should not be connected, no funds should be sent, and no tokens should be bought, bonded, or migrated through it. Read-only viewing is the only reasonable use. Anyone who has already interacted with it should review and revoke wallet permissions and seek independent advice.


_Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, page content, several checks together.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Page content
- The review of the page content rated it high risk. (Page content `rule:PAGE_RISK_HIGH`)
- The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`)
- The page content shows three or more warning signs that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_STRONG`)

### 03 Several checks together
- Several independent checks pointed to risk at the same time. (Several checks together `rule:HYB_MULTIPLE_MODULES_HIGH_RISK`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of thoreum-capital.pages.dev.

- The request stayed on thoreum-capital.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-08-10. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f5e |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-10 |
| Domain age | 2.19 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-08-10 |
| Archive snapshots | 16 |
| Reputation | VirusTotal: 4 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about thoreum-capital.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [register-bunnie-sol-xyz.pages.dev](https://trustsniffer.com/report/register-bunnie-sol-xyz.pages.dev), a similar name (Critical Risk, 0/100)
- [debridge-secure.pages.dev](https://trustsniffer.com/report/debridge-secure.pages.dev), a similar name (Critical Risk, 5/100)
- [worldlibirty-4la.pages.dev](https://trustsniffer.com/report/worldlibirty-4la.pages.dev), a similar name (Critical Risk, 0/100)
- [based-bet.pages.dev](https://trustsniffer.com/report/based-bet.pages.dev), a similar name (Critical Risk, 5/100)
- [bitcoininu.pages.dev](https://trustsniffer.com/report/bitcoininu.pages.dev), a similar name (Critical Risk, 23/100)
- [rewards-kucoin.pages.dev](https://trustsniffer.com/report/rewards-kucoin.pages.dev), a similar name (Critical Risk, 5/100)
- [migration-playzap-en.pages.dev](https://trustsniffer.com/report/migration-playzap-en.pages.dev), a similar name (Critical Risk, 5/100)
- [migrate-mypaal.pages.dev](https://trustsniffer.com/report/migrate-mypaal.pages.dev), a similar name (Critical Risk, 5/100)
- [devwatchaudit.casa](https://trustsniffer.com/report/devwatchaudit.casa), another site assessed as critical-risk (Critical Risk, 0/100)
- [hydrax.finance](https://trustsniffer.com/report/hydrax.finance), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/thoreum-capital.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/thoreum-capital.pages.dev · assessed 2026-10-20.*
