---
title: "Is 135538.vip a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "135538.vip"
verdict: "Critical Risk"
title: "Is 135538.vip a Scam? Trust Score 0/100"
trust_score: 0
classification_confidence: 70
canonical_url: https://trustsniffer.com/report/135538.vip
assessed: 2026-08-18
---

# Is 135538.vip a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** 135538.vip shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-08-18 by automated analysis. Classification confidence 70%.

| Field | Value |
| --- | --- |
| What this site appears to be | Promotional landing page for an online gambling/betting service (K8) in Chinese. Claims DICJ regulation, long brand history, and sponsorship; offers multiple 'lines' (entry links) to access betting. Lacks verifiable contact, licensing evidence, or detailed product/terms on the page. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 15 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 3.1 years old (Registered history) | Clear |
| Web archive | Archived since 2023 (5 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the 135538.vip homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/135538.vip/screenshots/first.png)

_What 135538.vip served when TrustSniffer captured it on 2026-08-18. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2023.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a Chinese-language promotional landing page for the K8 online gambling and betting service. It presents live-casino and wagering access through multiple entry links, promotes regulatory and sponsorship claims, and appears designed to direct visitors toward deposits and betting activity.


### Scam/Impersonation Risk

The site presents a **critical sensitive-interaction risk**. Multiple external security detections identify the domain as malicious or suspicious, and the domain is blacklisted across external sources. The homepage also exhibits a high-risk deposit-before-service model: it promotes live games and betting lines while providing little operational detail, creating an opaque path from visitor access to financial activity. No confirmed brand impersonation or conflicting legal-entity identity was established, but the external threat findings are sufficient to make account access, credential submission, deposits, and wagering inappropriate. The site’s historical record does not resolve these current security concerns.


Evidence:
- The homepage is a 154-character betting landing page titled “K8官网 - 天生赢家·一触即发” and provides three numbered entry links to betting lines.
- External security evaluation recorded 15 malicious detections and 1 suspicious detection; three named security providers also flagged the domain.
- The domain is recorded as blacklisted by two external sources.
- The registration record shows creation on 2025-06-05, with a recorded WHOIS age of 1.2 years.

### Regulatory Verification Notes

The homepage claims compliance with the Macau DICJ licensing and supervisory framework, a 20-year brand history, and an official Asia partnership with Atlético Madrid. Those claims are not substantiated on the available page by a license number, verifiable operator identity, detailed terms, or a clear contact address. The page therefore does not provide a sufficient basis to treat the claimed regulatory status or affiliations as established. The available identity verification remains unverified; the registrar record identifies Spaceship, Inc., while the registrant is represented through a privacy service. This is an identity-verification limitation rather than an independent finding of fraud. The absence of a matching record in the broker-reputation dataset provides no additional corroboration, but it is not a licensing determination.


Evidence:
- The homepage states that the service is licensed and supervised by DICJ but supplies no license number or supporting licensing document.
- The homepage claims “20年品牌 信誉保障” and an Atlético Madrid Asia partnership without presenting supporting evidence.
- The page contains no detailed product or betting terms and no verifiable contact or address information.
- The domain is registered through Spaceship, Inc.; the stated expiration date is 2027-06-05T07:31:05Z.

### What to Verify Next

Before any sensitive interaction, an independent party should confirm the claimed operator and authorization directly through the relevant Macau regulatory registry, using details obtained outside the website. The claimed sports affiliation should likewise be confirmed through an independently accessed Atlético Madrid corporate or partnership channel. Payment protection, withdrawal conditions, dispute handling, and the legal entity receiving funds should be established before any financial commitment. Until those checks are completed, the site should not be used for authentication, credential submission, deposits, or wagering.


Evidence:
- The homepage returned HTTP status 200 but contained no login or sensitive-data form.
- Behavioral testing completed 2 runs successfully; it observed 2 external XHR requests and 2 external POST requests, all classified as non-whitelisted.
- No wallet-connection flow, wallet provider, hidden form, or password-external form was detected during the observed interaction.

### Summary Verdict

The overall posture is critical, with the available evidence failing to support legitimate or safe sensitive engagement. The site’s identity is not independently verified, and the observed contradictions outweigh its limited positive technical characteristics. It should be treated as unsuitable for credential or financial interaction.


### Infrastructure Integrity

The website is protected by Cloudflare’s CDN/WAF infrastructure, with observed edge and potential origin-candidate addresses. This provides a mitigating layer against direct infrastructure exposure but does not validate the operator, the site’s regulatory claims, or its reputation.


### Closing Assessment

Maintain a non-interactive posture unless the operator, authorization, affiliation, and payment arrangements are independently verified through trusted channels.


_Written analysis generated 2026-08-18 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.

### 01 Governance Risk
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check. (Registration and ownership `rule:KF_WHOIS_PRIVATE`)
- The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`)

### 02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor. (Analysis engine `signal:direct_threat`)
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page sent data to a destination TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_POSTS`)
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 25% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of 135538.vip.

- The request stayed on 135538.vip. It was not redirected to another domain. (Clear)
- Registration is published under Spaceship, Inc.. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-06-05. (Noted)
- The earliest public archive of this site is from 2023-07-22. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Spaceship, Inc. |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::ac43:cf16 |
| Name servers | roxy.ns.cloudflare.com, ruben.ns.cloudflare.com |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-10 |
| Domain age | 3.07 years (continuous registration) |
| Domain expiry | 2027-06-05 |
| Archive first seen | 2023-07-22 |
| Archive snapshots | 5 |
| Reputation | VirusTotal: 15 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about 135538.vip at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [kryptonclient.vip risk report](https://trustsniffer.com/report/kryptonclient.vip) (Critical Risk, 0/100)
- [87558dhy.vip risk report](https://trustsniffer.com/report/87558dhy.vip) (Critical Risk, 0/100)
- [xn--yet824cpd.vip risk report](https://trustsniffer.com/report/xn--yet824cpd.vip) (Critical Risk, 0/100)
- [33033.vip risk report](https://trustsniffer.com/report/33033.vip) (Critical Risk, 0/100)
- [19199.vip risk report](https://trustsniffer.com/report/19199.vip) (Critical Risk, 0/100)
- [17000.vip risk report](https://trustsniffer.com/report/17000.vip) (Critical Risk, 0/100)
- [15005.vip risk report](https://trustsniffer.com/report/15005.vip) (Critical Risk, 0/100)
- [alardpublicschool.com risk report](https://trustsniffer.com/report/alardpublicschool.com) (Critical Risk, 0/100)
- [aviorinternational.com risk report](https://trustsniffer.com/report/aviorinternational.com) (Critical Risk, 0/100)
- [iglesiapentecostescentralpandevida.com risk report](https://trustsniffer.com/report/iglesiapentecostescentralpandevida.com) (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [Stablecoin Freezes Sep 25, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-25)
- [VietinBank Phishing: Spotting Domain Impersonation](https://trustsniffer.com/blog/vietinbank-phishing-domain-impersonation)
- [Stablecoin Freezes, Sep 24, 2026: 26 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-24)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/135538.vip) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/135538.vip · assessed 2026-08-18.*