Verdict
0961.jp shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Japanese-language minimal login page: 'Support | SUPPORT', 'Guest area', 'Please enter password.', 'Login'. No other contextual or trust information present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.7 years oldRegistered history | Clear |
| Web archive | Archived since 20216 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
0961.jp presents a minimal Japanese-language access page labelled “Support,” offering a “Guest area” that asks visitors to enter a password before selecting “Login.” It provides no visible explanation of the underlying service or business purpose, and appears designed to gate access rather than inform visitors about an identifiable business.
Scam/Impersonation Risk
Confirmed contradiction signals are present. External reputation checks identify the domain as blacklisted and recorded multiple malicious detections, while the page itself presents an unexplained password gate with no service context, business identity, or stated reason for access. This combination creates a material risk to credential security and makes the site unsuitable for login, credential submission, or financial interaction. No distinct brand-impersonation or conflicting legal-identity finding was established, but the confirmed blacklist status is independently sufficient for a critical cautionary posture.
- The member/login page contains only “Support,” “Guest area,” “Please enter password,” and “Login,” with one password form and no explanatory service content.
- External reputation assessment recorded 11 malicious detections and 1 suspicious detection from 17 evaluated results, with a confirmed blacklist listing.
- Domain registration continuity dates to 2021, with an authoritative age of approximately 4.73 years.
- Web-archive records contain 6 snapshots spanning 2021–2023, representing 3 years tracked.
Regulatory Verification Notes
The available site content does not identify a legal entity, licensing authority, registration number, product terms, pricing, or contact route. Identity verification therefore remains unresolved, and the page does not provide the disclosures needed to establish whether any regulated or financial activity is lawfully operated. A valid transport certificate confirms encrypted communication, but domain validation does not establish the operator’s identity, authorization, or regulatory standing.
- The site page provides no company name, license claim, licensing authority, or registration number.
- Hosted on AS9371 through SAKURA-C – SAKURA Internet Inc., Japan.
- TLS certificate issued by YR2 at DV validation level, valid to 2026-10-05, with 48 days remaining.
What to Verify Next
Before any interaction, an independent offline source should confirm the operator’s legal identity and any claimed authorization with the relevant corporate or regulatory registry. The official support and contact channels should also be authenticated through a separately sourced route, and any password associated with the site should be treated as potentially exposed if it has been entered elsewhere.
- The page lacks the legal and licensing identifiers required to conduct a direct registry cross-check.
- The only observed sensitive interaction is a password-entry form on an otherwise unexplained guest-access page.
Summary Verdict
The site has a critical trust posture driven by corroborated external threat detections and an unexplained sensitive-login surface. Its real-world operator cannot be independently connected to a verified identity from the available evidence, and the site should not be treated as a trustworthy destination for sensitive interaction.
Infrastructure Integrity
The site resolves directly to infrastructure operated by SAKURA-C – SAKURA Internet Inc., with no CDN or WAF identified and one likely origin address exposed. This provides a clear hosting path but offers no protective infrastructure signal capable of offsetting the external reputation and page-level concerns.
Closing Assessment
Enterprise controls should block or isolate the domain, prevent credential submission, and prohibit financial interaction unless the operator and access purpose are independently authenticated through trusted channels.
Written analysis generated 2026-08-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by page content, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The page presents a sign-in form, and the operator behind it could not be independently verified.Page content
rule:PAGE_TYPE_LOGIN_UNVERIFIED
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR - The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of 0961.jp.
- The request for 0961.jp ended on www.recommokinawa.com, a different domain. Watch
- The earliest public archive of this site is from 2021-11-22. Clear
- It is hosted on SAKURA-C, from a server in JP. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | SAKURA-C - SAKURA Internet Inc., JP |
| Country | JP |
| Server IP | 219.94.129.84 |
| Name servers | Not available |
| SSL issuer | YR2 |
| SSL expiry | 2026-10-05 |
| Domain age | 4.73 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2021-11-22 |
| Archive snapshots | 6 |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about 0961.jp at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.