Verdict
ashwinmehta.co.uk shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A minimal 'Launching Soon' landing page for ashwinmehta.co.uk with an email signup/contact form, cookie notice, and reCAPTCHA. No e-commerce, financial, or credential-collection functionality observed. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 26% confidenceAbuseIPDB, 13 reports; shared hosting inflates reports | Clear |
| Domain age | 8.0 years oldRegistered history | Clear |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by GoDaddy TLS Intermediate CA DV - R1v1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
ashwinmehta.co.uk is a minimal personal or portfolio landing page marked “Launching Soon,” presenting a contact form, email-update signup, cookie notice, and a reference to an AI website-builder service; its apparent purpose is to collect interest before a broader site launch, with no visible e-commerce, financial, or account-login function.
Scam/Impersonation Risk
The site presents no visible impersonation, phishing form, credential-harvesting mechanism, or direct financial transaction capability on the homepage, but those benign page characteristics are outweighed by confirmed external reputation contradictions, including multiple malicious detections and a confirmed blacklist status. The separate abuse-report signal concerns a shared content-delivery IP rather than an identified site operator, so it is not independently attributable to this domain; nevertheless, it adds adverse context to the confirmed blacklist finding. The resulting posture is unsuitable for sensitive interaction, including credential submission, financial activity, or reliance on the site as an established identity.
- The homepage is a “Launching Soon” landing page with one contact/email-signup form and no login, password, wallet, payment, or financial form.
- External reputation evaluation recorded 9 malicious and 1 suspicious detections for the domain, with an external blacklist hit.
- The shared CDN IP 76.223.105.230 has 13 abuse reports and a confidence score of 26; the attribution identifies shared Amazon infrastructure rather than the website as the direct subject.
- Domain registration records show creation on 2018-09-11T10:15:59Z and an age of 7.95 years; historical records are dated 2021-11-26T07:14:42Z through 2026-01-27T04:14:55Z, spanning 6 years tracked.
Regulatory Verification Notes
The homepage does not identify a corporate operator, regulated business activity, registration number, or license. Because the visible site is only a personal or portfolio landing page, this is a disclosure and verification gap rather than evidence of a regulated financial offering; however, the real-world identity remains unverified and the page does not provide sufficient legal context to establish accountability. A valid domain-validated certificate and mainstream hosting are technical positives, but they do not resolve the external reputation contradiction or independently establish ownership.
- The homepage identifies the site only by the domain name and copyright wording, without a named legal entity or licensing disclosure.
- The homepage states that it collects email signups for updates and promotions and contact messages, while offering no terms governing a commercial or regulated service.
- The site is registered through GoDaddy.com, LLC.
- The page has low observed authority and no detected structured identity data, such as organization markup or a substantive meta description.
What to Verify Next
Before any sensitive interaction, the domain should be checked through an independent, trusted security or organizational channel to determine whether the blacklist status has been remediated and whether the current landing page is genuinely associated with the intended operator. The operator’s legal identity should be confirmed through an offline or independently sourced contact route, and any future claim of regulated services should be checked against the relevant jurisdictional register before use. Until those checks are resolved, interaction should remain limited to passive viewing, with no submission of credentials, payment information, or unnecessary personal data.
- The current page provides no independent organization, registry, or licensing reference that can be used to validate the operator.
- The page’s only active collection mechanism is an email/contact form, making data-minimization and channel validation relevant before submission.
- Observed browser activity included 120 external XHR requests, 111 non-whitelisted XHR requests, 2 non-whitelisted POST requests, and 10 console errors across 2 successful runs.
Summary Verdict
The available evidence supports a critical sensitive-interaction risk posture rather than an established or independently verified identity. The confirmed blacklist and malicious external detections control the assessment despite the site’s limited, non-financial presentation and otherwise ordinary landing-page behavior.
Infrastructure Integrity
The website is served through Amazon infrastructure under AS16509, with observed addresses functioning as CDN edge servers and no origin candidate identified. CDN/WAF protection provides a mitigating layer against direct exposure, but it is an infrastructure control only and does not validate the operator or counter the reputation findings.
- Hosted on AS16509, Amazon.com, Inc., US; observed edge IPs are 13.248.243.5 and 76.223.105.230.
- TLS is domain-validated and issued by GoDaddy TLS Intermediate CA DV - R1v1, valid to 2026-10-09T15:22:02+00:00.
- The infrastructure record identifies CDN/WAF protection, with 2 observed edge IPs and 0 likely origin IPs.
Closing Assessment
Sensitive actions should be withheld pending independent confirmation of the operator, remediation of the external reputation findings, and establishment of a verifiable business context; passive viewing is the proportionate interim use.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 13 reports on hosting IP 76.223.105.230 (Amazon.com, Inc., Content Delivery Network), 26% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of ashwinmehta.co.uk.
- The request stayed on ashwinmehta.co.uk. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC.. Clear
- DNS for this domain is served by com., across 2 name servers. Noted
- The registration is paid up to 2026-09-11. Noted
- The earliest public archive of this site is from 2021-11-26. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC. |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 76.223.105.230 |
| Name servers | ns69.domaincontrol.com., ns70.domaincontrol.com. |
| SSL issuer | GoDaddy TLS Intermediate CA DV - R1v1 |
| SSL expiry | 2026-10-09 |
| Domain age | 7.95 years (continuous registration) |
| Domain expiry | 2026-09-11 |
| Archive first seen | 2021-11-26 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 26% confidence, 13 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about ashwinmehta.co.uk at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.