Verdict
1h16.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | An Epik-hosted domain parking/for-sale page indicating the domain registration has expired and offering options to purchase the domain. Lists accepted currencies (including crypto) and buyer protection features. No forms or credential requests present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 3 reports; shared hosting inflates reports | Clear |
| Domain age | 10 years oldRegistered history | Clear |
| Web archive | Archived since 201810 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2018.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a parked domain-marketplace landing page for 1h16.com, presented as an Epik-hosted listing for an expired domain name. It offers domain purchase and delivery services, buyer-protection claims, and payment in numerous fiat and cryptocurrency denominations rather than presenting an operating financial, commercial, or community service.
Scam/Impersonation Risk
Confirmed external threat and blacklist indicators materially outweigh the page’s otherwise ordinary domain-sale presentation. Multiple external threat detections are present, including a confirmed blacklist designation from two sources, creating a clear risk basis for sensitive interaction with the domain. The page itself does not request credentials, contain a login form, or show evidence of brand impersonation, phishing, or conflicting legal identities; therefore, the available evidence does not establish an identity contradiction or prove that the parked page is itself actively malicious. A separate abuse-report signal concerns shared hosting infrastructure, carries zero confidence, and is explicitly discounted because the reports apply to the provider’s shared IP rather than specifically to this domain. The page’s acceptance of BTC, ETH, USDT, USDC, LTC, and XRP for a domain purchase increases the importance of transaction controls despite the absence of a credential-collection mechanism.
- The homepage states that the domain registration has expired and presents the domain for purchase through Epik, with no forms or credential requests detected.
- External reputation telemetry recorded 14 malicious determinations and 1 suspicious determination, with blacklist status confirmed by 2 sources.
- The domain was registered in 2016 and is approximately 10.09 years old.
- Archive records contain 10 snapshots spanning 2018–2026, with 9 years tracked.
Regulatory Verification Notes
The page identifies Epik LLC in its footer as the trademark and copyright holder of the marketplace presentation, but the available evidence does not independently verify the real-world operator of the specific domain. The page does not present a regulatory license or registration number; for a domain-aftermarket service this is a disclosure and verification matter rather than, by itself, evidence of fraud. The apparent Epik association should therefore be treated as a page-level claim supported by the visible marketplace branding, not as independently established identity or regulatory authorization.
- The homepage footer identifies “Epik LLC” as the registered-trademark and copyright-holder entity for the presented marketplace page.
- The domain is served from AS394456, identified as EPIK-LLC / Epik LLC, US.
- The site’s TLS certificate is issued by YR1 with DV validation and is valid to 2026-11-09.
What to Verify Next
Before any purchase or other sensitive interaction, an independent registrar record should confirm the domain’s current registration, expiry, and transfer status. The marketplace relationship, transaction terms, delivery process, and scope of buyer protection should be confirmed through independently obtained Epik contact channels rather than relying solely on the parked page. Any payment should use a method offering meaningful dispute or chargeback protection, and the recipient and settlement details should be checked before authorization.
- Confirm the current registration and transfer state through an independent registrar record.
- Obtain the applicable marketplace terms and buyer-protection conditions through an independently sourced Epik support channel.
- Validate the final payment recipient and retain transaction records before authorizing a purchase.
Summary Verdict
The overall posture is critical risk for sensitive interaction. The site appears to be a conventional parked-domain listing, but the confirmed external threat and blacklist indicators prevent the available evidence from supporting trust for login, credential submission, or financial activity.
Infrastructure Integrity
The site is hosted directly by Epik LLC without a detected CDN or WAF layer, and the resolved infrastructure includes likely origin addresses rather than edge-mediated delivery. This provides limited protective separation and should be regarded only as a mitigating technical observation, not as evidence of legitimacy.
Closing Assessment
Passive viewing is the proportionate use at present; account access, credential submission, and payment activity should remain suspended until the independent checks above are completed.
Written analysis generated 2026-08-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 3 reports on hosting IP 209.196.146.115 (Epik LLC, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 79/100 |
| Identity verification confidence | 39% |
- Trusted social count=3
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of 1h16.com.
- The request stayed on 1h16.com. It was not redirected to another domain. Clear
- Registration is published under Epik LLC. Clear
- DNS for this domain is served by epik.com, across 2 name servers. Noted
- The registration is paid up to 2027-07-17. Noted
- The earliest public archive of this site is from 2018-08-07. Clear
- It is hosted on EPIK-LLC, from a server in US. Noted
Domain intelligence
| Registrar | Epik LLC |
|---|---|
| Hosting | EPIK-LLC - Epik LLC, US |
| Country | US |
| Server IP | 209.196.146.115 |
| Name servers | NS3.EPIK.COM, NS4.EPIK.COM |
| SSL issuer | YR1 |
| SSL expiry | 2026-11-09 |
| Domain age | 10.09 years (continuous registration) |
| Domain expiry | 2027-07-17 |
| Archive first seen | 2018-08-07 |
| Archive snapshots | 10 |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 0% confidence, 3 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about 1h16.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.