Verdict
17vip04.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Short Chinese-language page containing a brand slogan and several lines of classical-style poetry; no forms, links, or monetization cues present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 19 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 1.4 years oldRegistered history | Clear |
| Web archive | Archived since 202510 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a short Chinese-language informational page presenting a brand slogan and excerpts from classical Chinese poetry, with no visible account, payment, trading, or other monetization function; its apparent purpose is promotional or informational rather than an operational online service.
Scam/Impersonation Risk
Confirmed external reputation contradictions create a critical risk posture. Multiple external security assessments classify the domain as malicious, and the site is blacklisted by two external sources. This finding outweighs the page’s benign appearance: the reviewed content contains no login form, credential request, financial solicitation, or explicit impersonation signal, but its limited static presentation provides little basis for establishing a legitimate operating purpose. No separate conflicting legal-entity names or direct brand-impersonation indicators were identified in the supplied page analysis.
- External reputation telemetry recorded 19 malicious detections, with no suspicious-only detections, across 24 effective evaluations.
- The domain is blacklisted by two external sources; the associated protective action was activated because malicious detections met the applicable threshold.
- Domain registration records show registration in 2025, with an age of approximately 1.17 years.
- Archive records contain 10 snapshots spanning 2025–2026, covering 2 tracked years.
Regulatory Verification Notes
The reviewed page does not identify an operating company, legal entity, regulatory authority, or license number. This is a material disclosure gap for any engagement involving regulated services, although the page itself presents no financial business model or licensing claim. Operator identity remains unverified, and the available content is insufficient to connect the site independently to a real-world organization. Valid transport encryption and mainstream hosting infrastructure are technical protections, not evidence of licensing or lawful operation.
- The reviewed page contains 76 characters of visible text, no forms, and no stated license authority or license number.
- Hosting is through AS13335, CLOUDFLARENET — Cloudflare, Inc., US.
- The site’s TLS certificate was issued by WE1 at DV validation level and is valid to 2026-11-02 17:37:40 UTC.
What to Verify Next
Any proposed use beyond passive viewing should be suspended until the operator can be established through an independent channel. A prospective counterparty should obtain the legal entity name, jurisdiction, licensing details where applicable, and independently confirm them with the relevant official registry; contact channels should also be validated through an offline or previously trusted route. Credentials, authentication tokens, payment details, and financial transfers should not be submitted to this domain.
- The homepage has no login form, hidden form, sensitive form, wallet connection, or password-submission destination.
- Behavioral testing recorded 2 external XHR requests and 2 external POST requests, all classified as non-whitelisted.
- The observed page has no internal links, external links, metadata description, canonical reference, or identified social-domain presence.
Summary Verdict
The website has a critical trust posture and should not be treated as an established or verified service provider. The decisive concern is the convergence of confirmed external malicious detections and blacklist status with an unverified operating identity and minimal substantive content.
Infrastructure Integrity
Cloudflare CDN/WAF protection is a mitigating infrastructure control, and all observed addresses were Cloudflare edge endpoints rather than a directly exposed origin; the origin server was not observable in this analysis. This reduces direct origin exposure but does not offset the external reputation findings or establish legitimacy.
Closing Assessment
Enterprise controls should block sensitive interaction with the domain and require independent identity and regulatory validation before any future engagement is considered.
Written analysis generated 2026-08-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of 17vip04.com.
- The request stayed on 17vip04.com. It was not redirected to another domain. Clear
- Registration is published under Dynadot Inc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-15. Noted
- The earliest public archive of this site is from 2025-03-29. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Dynadot Inc |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:602 |
| Name servers | JOHNATHAN.NS.CLOUDFLARE.COM, STEPHANE.NS.CLOUDFLARE.COM |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-02 |
| Domain age | 1.39 years (continuous registration) |
| Domain expiry | 2027-06-15 |
| Archive first seen | 2025-03-29 |
| Archive snapshots | 10 |
| Reputation | VirusTotal: 19 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about 17vip04.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.