--- title: "Is 995552222.com a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "995552222.com" verdict: "Critical Risk" title: "Is 995552222.com a Scam? Trust Score 0/100" trust_score: 0 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/995552222.com assessed: 2026-08-20 --- # Is 995552222.com a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** 995552222.com shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-08-20 by automated analysis. Classification confidence 55%. | Field | Value | | --- | --- | | What this site appears to be | Chinese-language ecommerce product/catalog page for backpacks and accessories. Shows product names, prices (¥), links to marketplace storefronts, contact email, ICP and company registration info. Appears to be a retail shop site rather than financial or phishing content. | ## Evidence status and limitations Evidence completeness: UNKNOWN - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 14 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted | | Domain age | 3.9 years old (Registered history) | Clear | | Web archive | Archived since 2018 (Public history exists) | Clear | | Certificate | Encrypted connection (Issued by YR1) | Noted | ## The page as captured ![Screenshot of the 995552222.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/995552222.com/screenshots/first.png) _What 995552222.com served when TrustSniffer captured it on 2026-08-20. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: 3 to 10 years (registration continuity). - Public web-archive history exists since 2018. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. The website is a Chinese-language ecommerce storefront presenting backpacks and accessories for direct consumer purchase, with product listings, prices in yuan, links to Tmall and JD marketplace storefronts, customer-service references, and shipping and returns claims. Its apparent business model is retail sales, although the page title and repeated text also contain unrelated gambling and sports-betting phrases. ### Scam/Impersonation Risk The site carries a material scam and impersonation risk because external security intelligence records malicious detections and a confirmed blacklist presence from multiple sources. This conflicts with the otherwise ordinary retail presentation and is the decisive risk signal. The homepage’s unrelated references to “365bet,” sports websites, and World Cup betting are also inconsistent with the displayed backpack catalogue, suggesting possible content contamination, unauthorized repurposing, or a compromised presentation. No login form, password-collection form, wallet connection, or confirmed brand-impersonation pattern was observed in the supplied page and behavior evidence, but those benign elements do not offset the external threat findings. Sensitive interaction should therefore be treated as unsafe pending independent clearance. Evidence: - The homepage presents backpack and accessory listings while its title and repeated page text contain unrelated gambling and sports-betting phrases. - External reputation records identify the domain as blacklisted and report malicious detections; the evidence includes detections associated with Fortinet, Kaspersky, and Sophos. - Domain registration telemetry: registered 2022-09-29 (~3.89 years old) through NameSilo, LLC. - Web-archive telemetry: 143 snapshots spanning 2018–2026 (9 years tracked). ### Regulatory Verification Notes The footer and site content display ICP information, company-registration references, and the Chinese entity name “中山北欧式贸易有限公司.” These are on-site disclosures rather than independently verified proof that the named entity operates the domain. The site is presented as a retail business and does not claim a financial or regulated-services license; the available evidence therefore supports a merchant-identity verification requirement rather than a licensing conclusion. The available identity linkage remains unverified. A separate broker-reputation dataset returned no match, which provides only limited contextual reassurance and does not validate the merchant or override the security findings. Evidence: - The homepage footer displays an ICP filing reference, a public-security registration reference, and an “营业执照” company-registration reference. - The homepage identifies the apparent operator as “中山北欧式贸易有限公司.” - Hosting telemetry: served from AS398823, PEG-LA - PEG TECH INC, US. - TLS telemetry: certificate issued by YR1, domain validation (DV), valid to 2026-11-02. ### What to Verify Next Before any payment, account creation, or submission of personal information, an independent party should confirm that the company-registration and ICP details shown on the legal/footer pages correspond to the domain and to the intended seller. The merchant’s return, refund, delivery, and payment-protection arrangements should be checked through the relevant marketplace storefronts or another independently sourced channel, rather than relying solely on links presented by the site. A security team should also obtain a current disposition of the external blacklist and malicious-detection records before permitting sensitive interaction. Evidence: - The legal and footer areas provide the company and filing details needed for an independent registry comparison. - The homepage references Tmall and JD storefronts, providing potential alternate channels for merchant and transaction verification. - The site exposes an email-subscription form but no sensitive login or password form, so verification should focus on payment and identity controls before expanding permitted interaction. ### Summary Verdict The website has a **critical trust posture** and should not be treated as a trustworthy destination for sensitive interaction. Its retail content and on-site corporate disclosures are outweighed by confirmed external reputation contradictions and the unresolved mismatch between the site’s apparent business purpose and its page-level text. The operator’s real-world identity is not independently verified. ### Infrastructure Integrity The site resolves directly to a single apparent origin address hosted by PEG-LA - PEG TECH INC in the United States, on AS398823, with no CDN or WAF identified. The transport layer uses a valid DV certificate issued by YR1, but encryption confirms only the protected connection and does not establish the legitimacy of the operator or content. ### Closing Assessment Prospective users should limit activity to passive viewing and require independent merchant verification and security-team clearance before entering credentials, submitting personal information, or initiating any financial transaction. _Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation. ### 01 Governance Risk - The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`) - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check. (Registration and ownership `rule:KF_WHOIS_PRIVATE`) ### 02 Sensitive Interaction Risk - The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor. (Analysis engine `signal:direct_threat`) - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on. (Behaviour in a sandbox `rule:BEHAV_DOM_DIFF_AFTER_INTERACTION`) - The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`) - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 25% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of 995552222.com. - The request stayed on 995552222.com. It was not redirected to another domain. (Clear) - Registration is published under NameSilo, LLC. (Clear) - DNS for this domain is served by dnsowl.com, across 3 name servers. (Noted) - The registration is paid up to 2026-09-29. (Noted) - The earliest public archive of this site is from 2018-08-06. (Clear) - It is hosted on PEG-LA, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | NameSilo, LLC | | Hosting | PEG-LA - PEG TECH INC, US | | Country | US | | Server IP | 140.188.174.79 | | Name servers | NS1.DNSOWL.COM, NS2.DNSOWL.COM, NS3.DNSOWL.COM | | SSL issuer | YR1 | | SSL expiry | 2026-11-02 | | Domain age | 3.89 years (continuous registration) | | Domain expiry | 2026-09-29 | | Archive first seen | 2018-08-06 | | Archive snapshots | Not counted (archive lookup incomplete) | | Reputation | VirusTotal: 14 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment A trust score summarises the evidence TrustSniffer could collect about 995552222.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [polybutyleneflorida.com risk report](https://trustsniffer.com/report/polybutyleneflorida.com) (Critical Risk, 0/100) - [nfsglobalsolution.com risk report](https://trustsniffer.com/report/nfsglobalsolution.com) (Critical Risk, 0/100) - [bbgimn.com risk report](https://trustsniffer.com/report/bbgimn.com) (Critical Risk, 0/100) - [styledebates.com risk report](https://trustsniffer.com/report/styledebates.com) (Critical Risk, 0/100) - [africaboundadventures.com risk report](https://trustsniffer.com/report/africaboundadventures.com) (Critical Risk, 0/100) - [mrpalace.com risk report](https://trustsniffer.com/report/mrpalace.com) (Critical Risk, 0/100) - [blupeakadvisors.com risk report](https://trustsniffer.com/report/blupeakadvisors.com) (Critical Risk, 5/100) - [yona-yethuu.co.za risk report](https://trustsniffer.com/report/yona-yethuu.co.za) (Critical Risk, 0/100) - [amphitheatreberrybankpark.co.uk risk report](https://trustsniffer.com/report/amphitheatreberrybankpark.co.uk) (Critical Risk, 0/100) - [bearpaw-shop.ru risk report](https://trustsniffer.com/report/bearpaw-shop.ru) (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory) - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains) - [Check another website](https://trustsniffer.com/web-intelligence) - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk) - [The TrustSniffer Risk Index](https://trustsniffer.com/stats) ## Guides - [How We See USDT Wallet Freezes Coming](https://trustsniffer.com/blog/how-trustsniffer-sees-usdt-wallet-freezes-coming) - [Stablecoin Freezes, Sep 26, 2026: 1 Wallet](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-26) - [Stablecoin Freezes Sep 25, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-25) --- *Source: [TrustSniffer](https://trustsniffer.com/report/995552222.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/995552222.com · assessed 2026-08-20.*