Verdict
28306.cn shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Empty or loading-only page with no visible text or actionable elements. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 2.3 years oldRegistered history | Clear |
| Web archive | Archived since 20242 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website at 28306.cn currently presents an empty or loading-only page with no readable text, visible business description, actionable elements, or discernible commercial purpose; its intended business model therefore cannot be established from the observed homepage.
Scam/Impersonation Risk
Confirmed external threat signals create a critical interaction risk. The domain is blacklisted by external reputation sources, with multiple security providers classifying it as malicious and one additional provider marking it suspicious. The homepage itself does not expose a brand, login workflow, payment mechanism, or stated service that would permit a specific impersonation claim; however, its absence of content prevents meaningful validation of purpose or operator. Network behavior also showed a high proportion of non-whitelisted external activity, which is inconsistent with treating the currently observed page as a reliable basis for sensitive interaction. No separate identity contradiction or confirmed brand impersonation was observed.
- External reputation telemetry: 16 malicious detections and 1 suspicious detection from 22 effective evaluations; a Tier 1 threat was detected.
- Homepage behavior: 50 external XHR requests and 6 external POST requests were observed, with all 50 XHR requests and all 6 POST requests classified as non-whitelisted.
- Archive provenance: first seen 2024-04-20T15:58:15Z, last seen 2025-11-09T13:22:04Z, with 2 snapshots across 2 tracked years; archive-reconciled domain age is 2.324435318275154 years.
Regulatory Verification Notes
The site's legal and regulatory position cannot be established from the observed homepage because it contains no readable operator identity, service description, licensing statement, or registration number. The available identity linkage remains unverified, so any real-world operator attribution should be treated as unconfirmed rather than accepted from the domain alone. The absence of a broker-dataset match provides no licensing or regulatory assurance. Transport security and identifiable hosting are technical properties only and do not establish authorization to provide regulated services.
- Registration telemetry: registrar Dynadot Inc; creation date 2026-04-11T22:12:57Z; recorded age 0.35 years.
- Hosting telemetry: served from AS59371, DNC-AS - Dimension Network & Communication Limited, HK; registry APNIC; hosting country HK.
- TLS telemetry: DV certificate issued by YR1, valid to 2026-11-09T12:32:30+00:00.
What to Verify Next
Before any sensitive interaction, an independent registry or corporate-records check should establish the legal operator, jurisdiction, and authority to conduct the activity represented by the domain. Any licensing claim should be matched directly against the relevant regulator using independently obtained contact details, and official support or contact channels should be confirmed through an offline or otherwise trusted route. Until those checks succeed, the domain should not be used for account access, credential submission, or financial activity.
- Homepage review: no readable legal, licensing, contact, or service information was available for independent validation.
- Identity assessment: the operator could not be independently connected to a verified real-world entity from the supplied evidence.
Summary Verdict
The overall posture is critical risk, driven by corroborated external malicious detections and a confirmed blacklist signal combined with the absence of usable site content for validation. The available evidence does not support treating the domain as trustworthy for sensitive interaction, and the operator identity remains unverified.
Infrastructure Integrity
The domain resolves directly to infrastructure operated by DNC-AS - Dimension Network & Communication Limited in Hong Kong, without an observed mainstream CDN or WAF layer; the resolution includes likely origin infrastructure. This configuration offers no meaningful protective mitigation against the established reputation risk.
- Infrastructure resolution: 3 unique IPs, 0 edge IPs, and 3 likely origin IPs; no CDN detected.
- Hosting artifact: AS59371 / DNC-AS - Dimension Network & Communication Limited, HK.
Closing Assessment
The proportionate institutional posture is to refrain from login, credential submission, and financial transactions involving this domain unless independent identity, regulatory, and technical validation materially changes the assessment.
Written analysis generated 2026-08-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of 28306.cn.
- The request stayed on 28306.cn. It was not redirected to another domain. Clear
- Registration is published under Dynadot Inc. Clear
- DNS for this domain is served by dnsip.com, across 2 name servers. Noted
- The registration is paid up to 2027-04-11. Noted
- The earliest public archive of this site is from 2024-04-20. Clear
- It is hosted on DNC-AS, from a server in HK. Noted
Domain intelligence
| Registrar | Dynadot Inc |
|---|---|
| Hosting | DNC-AS - Dimension Network & Communication Limited, HK |
| Country | HK |
| Server IP | 103.48.6.14 |
| Name servers | ns1.dnsip.com, ns2.dnsip.com |
| SSL issuer | YR1 |
| SSL expiry | 2026-11-09 |
| Domain age | 2.32 years (continuous registration) |
| Domain expiry | 2027-04-11 |
| Archive first seen | 2024-04-20 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about 28306.cn at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.