---
title: "Is vtyvv.pages.dev a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "vtyvv.pages.dev"
verdict: "Critical Risk"
title: "Is vtyvv.pages.dev a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/vtyvv.pages.dev
assessed: 2026-10-27
---

# Is vtyvv.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** vtyvv.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 7 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WE1) | Noted |
| Hosted by | CLOUDFLARENET (Server in US) | Noted |

## The page as captured


![Screenshot of the vtyvv.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/vtyvv.pages.dev/screenshots/first.png)

_What vtyvv.pages.dev served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a project hosted on a free, shared subdomain of a developer web-publishing platform. Its content could not be seen as intended: automated access returned a protective interstitial page, titled as a suspected-phishing warning, with only a few hundred characters of text and no identifiable brand, product or service. Its apparent purpose cannot be established from what was presented, but it is currently flagged by multiple independent security sources as malicious.


### Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. The domain is **confirmed as blacklisted** by external threat-intelligence sources, and several independent security engines classify it as malicious, including two major security vendors. Further engines rate it suspicious. The page returned to the analysis sensor was itself a phishing-warning interstitial, which corroborates these detections rather than contradicting them. No brand impersonation or conflicting legal identities were observed, because no identity or legal pages were available to compare. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms or credential posts to external destinations. These clean results do not offset the reputation findings. The site did load a very high proportion of its content from external origins, made repeated external background requests and submissions, produced repeated script errors, and rewrote a large share of the page structure after interaction. That pattern is consistent with content that changes after load, which suits staged phishing or redirection and cannot be reviewed from a static snapshot. Evidence:

- Homepage: the page served to the sensor was a protective interstitial titled as a suspected-phishing warning, and the capture was blocked with an access-denied response.
- External reputation: seven security engines flag the domain as malicious and two as suspicious, with an external blacklist hit confirmed.
- Homepage behaviour across three test runs: 50 external background requests, 5 external submissions, 12 console errors and about 1,500 page-structure mutations after interaction.
- Behavioural testing found no wallet-connect, clipboard-write or hidden-form activity.

### Regulatory Verification Notes

No legal, terms, privacy, about or contact pages could be reviewed, so there is no on-site company name, licence, registration number or regulator reference to assess. A shared platform subdomain also gives no independent corporate anchor. The lack of regulatory information is a verification gap, not proof of wrongdoing. Here, however, it comes with confirmed threat detections, so no claim of authorisation or licensing could be accepted without independent proof. The third-party broker dataset returned no match for this domain, which means only that no broker-reputation signal exists. It is not a regulatory clearance. Technical hygiene is unremarkable and does not mitigate the reputation findings. Evidence:

- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-01; it proves encryption, not operator identity.
- Homepage: no legal-entity name, licence or registry reference was visible in the content captured.

### What to Verify Next

Any reference to this site received through a message, advertisement or social channel should be traced back to its sender and checked through an independent, offline route. If the site claims to represent a company, that company's official domain should be obtained from a registry or from a source unconnected to this link, and the two compared. Any licence or registration claim should be checked directly with the relevant regulator's public register, not through details the site supplies. Official support channels should likewise be confirmed independently. If the domain was reached through an unsolicited link, the message should be reported to the platform or mailbox provider that delivered it. Evidence:

- Homepage: no operator identity was presented that could be cross-checked.
- Reputation: independent detections remain active against this domain.
- Hosting: the platform subdomain structure means the real operator is not evident from the address.

### Summary Verdict

The site is assessed as critically untrustworthy and as carrying a high risk of harm. Confirmed blacklisting and consistent malicious classifications from multiple independent sources outweigh the minor technical signals in its favour. Legitimacy cannot be supported, and the real-world operator is not identified.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, with a valid certificate and only edge addresses observable, so the origin server is not independently visible. These protections are a mitigating factor only. They reduce exposure to generic network attacks, but they do not vouch for the operator. They also make it harder to confirm the real hosting and to detect rapid content swaps. They cannot offset the current threat detections.


### Closing Assessment

The site should not be used for login, credential entry, payments or any financial interaction, and no files should be downloaded from it. Any visit should be limited to passive viewing, from an isolated browser or device. Anyone who has already entered credentials or made a payment should change the affected passwords immediately, notify their financial provider, and report the link.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of vtyvv.pages.dev.

- The request stayed on vtyvv.pages.dev. It was not redirected to another domain. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2cd7 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-01 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 7 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about vtyvv.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [voting-mefai-net.pages.dev](https://trustsniffer.com/report/voting-mefai-net.pages.dev), a similar name (Critical Risk, 21/100)
- [solspin-8dn.pages.dev](https://trustsniffer.com/report/solspin-8dn.pages.dev), a similar name (Critical Risk, 0/100)
- [sale-creator-bid.pages.dev](https://trustsniffer.com/report/sale-creator-bid.pages.dev), a similar name (Critical Risk, 22/100)
- [unich-quests-net.pages.dev](https://trustsniffer.com/report/unich-quests-net.pages.dev), a similar name (Critical Risk, 0/100)
- [innovateprotoclls.pages.dev](https://trustsniffer.com/report/innovateprotoclls.pages.dev), a similar name (Critical Risk, 0/100)
- [matchaxyz-email-promo.pages.dev](https://trustsniffer.com/report/matchaxyz-email-promo.pages.dev), a similar name (Critical Risk, 9/100)
- [telcoins-bank-com.pages.dev](https://trustsniffer.com/report/telcoins-bank-com.pages.dev), a similar name (Critical Risk, 0/100)
- [vv-direct-website.pages.dev](https://trustsniffer.com/report/vv-direct-website.pages.dev), a similar name (Critical Risk, 0/100)
- [blaze-stake.org](https://trustsniffer.com/report/blaze-stake.org), another site assessed as critical-risk (Critical Risk, 0/100)
- [sui-dao.pro](https://trustsniffer.com/report/sui-dao.pro), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/vtyvv.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/vtyvv.pages.dev · assessed 2026-10-27.*