Verdict
arabellaship.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A minimal page containing only the text 'Arabella Ship'. No links, forms, or commercial content present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 17 years oldRegistered history | Clear |
| Web archive | Archived since 2011Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2011.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Arabella Ship is a minimal landing page that presents only the text “Arabella Ship,” with no visible links, forms, products, services, or stated commercial purpose.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk because external security telemetry recorded multiple malicious detections and a confirmed blacklist status from more than one source. This is materially more significant than the benign page-level behavior: the homepage contains no login form, credential collection, wallet connection, external posting, or suspicious script activity, but its extremely limited content provides no positive business context capable of explaining or offsetting the external threat signals. No separate brand-impersonation or conflicting legal-identity finding was observed; the principal contradiction is the confirmed blacklist and associated malicious detections.
- External reputation telemetry recorded 15 malicious and 1 suspicious detection, with Fortinet and Sophos among the flagged security vendors.
- The domain was recorded as blacklisted by two external sources; Google Safe Browsing separately reported no malicious result.
- The homepage contains 13 characters of visible text, no links, no forms, and no commercial content.
- Browser testing recorded zero external requests, zero wallet activity, zero clipboard activity, and no hidden forms across two successful runs.
Regulatory Verification Notes
The operator’s real-world identity is unverified, and the available site content does not establish a corporate entity, regulated status, license, or business model. This is a regulatory and governance transparency gap rather than a separate identity contradiction. The long-standing domain registration and valid transport security are administrative and technical positives, but they do not validate the operator or overcome the external reputation findings. No matching third-party broker record was identified; that absence is contextual only and is not a licensing determination.
- The domain was registered through Dynadot Inc on 2009-03-24 and is approximately 17.42 years old.
- Historical coverage is recorded from 2011-07-17 through 2025-07-10, spanning 15 tracked years.
- The site is served from AS29066, VELIANET-AS – velia.net Internetdienste GmbH, DE.
- The TLS certificate is issued by YR1, uses Domain Validation (DV), and is valid until 2026-10-20.
What to Verify Next
Before any sensitive interaction, independently identify the operating entity through a corporate registry and confirm any claimed authorization with the relevant regulator rather than relying on the site. Contact channels should be validated through an independently sourced route, and any proposed payment, account, or credential workflow should be tested only after those checks produce a consistent legal and operational identity.
- The homepage supplies no visible legal, licensing, contact, or service documentation against which the operator can be validated.
- The available identity assessment contains no independent signals connecting the site to a verified real-world entity.
- The external threat assessment remains the decisive unresolved issue for sensitive use.
Summary Verdict
The website has a critical trust posture and should not be treated as an established or verified service for sensitive interaction. Its minimal presentation, unverified operator identity, and confirmed external threat detections produce a materially adverse legitimacy and security assessment despite stable technical behavior.
Infrastructure Integrity
The site is protected by a CDN/WAF arrangement, with four observed CDN edge servers and one potential origin candidate. This architecture may reduce direct exposure of the hosting system, but it is only a mitigating control and does not establish legitimacy or counter the confirmed external reputation risk.
Closing Assessment
Use should remain limited to non-interactive observation, with login, credential submission, payment, and other financial actions deferred unless independent identity and security validation resolves the outstanding concerns.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of arabellaship.com.
- The request stayed on arabellaship.com. It was not redirected to another domain. Clear
- Registration is published under Dynadot Inc. Clear
- DNS for this domain is served by jordanmemory.com, across 2 name servers. Noted
- The registration is paid up to 2027-03-24. Noted
- The earliest public archive of this site is from 2011-07-17. Clear
- It is hosted on VELIANET-AS, from a server in DE. Noted
Domain intelligence
| Registrar | Dynadot Inc |
|---|---|
| Hosting | VELIANET-AS - velia.net Internetdienste GmbH, DE |
| Country | DE |
| Server IP | 134.119.186.98 |
| Name servers | NS1.JORDANMEMORY.COM, NS2.JORDANMEMORY.COM |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-20 |
| Domain age | 17.42 years (continuous registration) |
| Domain expiry | 2027-03-24 |
| Archive first seen | 2011-07-17 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about arabellaship.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.