Is 203krehab.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

203krehab.com presents a minimal personal or placeholder page displaying only the name “Tom Andros.” It offers no visible service, product, transaction flow, or stated commercial purpose, so its apparent function is limited to identifying a person or placeholder rather than operating as an established business website.

Scam/Impersonation Risk

The site carries a clearly cautionary risk posture because external reputation checks recorded malicious detections and confirmed blacklist listings. The page itself does not show a brand impersonation, phishing form, or conflicting legal identity; however, its extremely limited content provides no meaningful basis for connecting the displayed name to a legitimate real-world operator. A separate abuse-report signal concerns a shared provider IP, so it does not by itself establish that the site caused those reports, but it remains an adverse external signal alongside the confirmed blacklist findings. The contact-channel integrity anomaly is the published address “[email protected],” whose malformed top-level domain could prevent delivery or represent a possible typosquat. Evidence:

• External checks recorded 3 malicious and 2 suspicious detections, with blacklist status reported by 2 external sources.
• The site's homepage contains only the displayed name “Tom Andros,” with no links, forms, metadata, or business explanation.
• Domain registration evidence records creation on 2008-08-01 and an age of 18.06 years.
• Web-archive records contain 39 snapshots spanning 2001–2026, covering 26 tracked years; the historical analysis found no suspicious repurposing or semantic drift.

Regulatory Verification Notes

The available page content does not establish a legal entity, regulated activity, or licensing position. The displayed personal name is not independently connected to an operator, company, or regulated institution, and the site's governance and ownership disclosures are therefore insufficient for institutional reliance. No broker match was identified in the available third-party context, but that is only a reputational observation and does not constitute licensing or regulatory confirmation. The valid transport certificate is a security control, not evidence of legal identity or authorization. Evidence:

• The homepage presents the name “Tom Andros” without an accompanying company name, legal notice, terms page, or regulatory disclosure.
• WHOIS records identify Dynadot Inc as registrar and show an expiration date of 2028-08-01.
• The site's TLS certificate is DV-validated, issued by YR1, and valid to 2026-09-18T05:46:43+00:00.
• The available broker-intelligence context reports no match.

What to Verify Next

Before any sensitive interaction, independently identify the operator through a reliable offline or previously trusted channel and confirm why this domain is associated with that person. If the site is intended to support a regulated, financial, property, or other professional service, confirm the relevant authorization directly with the applicable official registry rather than relying on the webpage. Any proposed account, payment, document-submission, or credential workflow should be validated only after those checks are complete. Evidence:

• The homepage has no login form, sensitive form, hidden form, or untrusted form destination.
• Observed browser runs recorded 0 wallet-connect executions, 0 wallet-sensitive actions, and 0 wallet-drainer actions.
• The page exposed no internal or external links through which an operator, service, or regulatory record could be followed.

Summary Verdict

The overall posture is critical trust risk and is unsuitable for sensitive interaction. The available evidence supports neither a verified operator identity nor a credible business purpose, while the adverse external reputation findings materially outweigh the benign presentation of the page.

Infrastructure Integrity

The website is protected by AWS CDN/WAF infrastructure, and the observed address is an edge server rather than an independently visible origin. This provides a meaningful layer of traffic and exposure mitigation, but protective hosting infrastructure cannot validate the operator or offset the site's external reputation risk. Evidence:

• Served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), observed edge IP 54.215.31.113.
• AWS CDN/WAF protection was detected; 1 edge IP was observed and 0 origin candidates were identified.

Closing Assessment

Sensitive actions should remain suspended unless independent operator, purpose, and authorization checks produce reliable corroboration; ordinary browsing of the static page does not resolve the underlying trust concerns.

Signals weighed against the site

• AbuseIPDB: 9 reports on hosting IP 54.215.31.113 (Amazon.com, Inc., Content Delivery Network), 16% confidence. The reports are attributed to shared infrastructure, not specifically to this website.