Verdict
aussiegiftcard.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | AussieGiftCard.com appears to be a sweepstakes/prize entry site that collects personal and contact information in order to enter users into draws. The site explicitly states it shares user data with advertisers, sponsors and third parties (including financial product advertisers). While there is no indication of payment/deposit or cryptocurrency requests, the business model monetizes user data and the exact downstream use and protections are opaque. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 12 years oldRegistered history | Clear |
| Web archive | Archived since 2016Public history exists | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2016.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
AussieGiftCard.com presents itself as a promotional prize-draw and voucher-entry website offering opportunities to win gift cards, subscriptions, cash-equivalent rewards, and branded goods; its apparent business model is to collect entrant contact and survey data and monetise that information through advertisers, sponsors, and partner referrals.
Scam/Impersonation Risk
Contradictory risk signals are present. External reputation telemetry records a confirmed blacklist hit, including nine malicious detections and two suspicious detections, which is the decisive security concern for sensitive interaction. The homepage contains a single lead-capture and contest-entry form that requests personal information and has been assessed as submitting to an untrusted destination. The site does not present a login flow, cryptocurrency mechanism, or direct payment/deposit request, and no specific brand impersonation or conflicting legal identity was established; these points limit the type of observed threat but do not offset the confirmed reputation findings. The promotional claims include opportunities to win an iPhone X, an iPhone 7, a $500 Virgin Australia gift card, a one-year Netflix subscription, VISA Cash, PayPal Cash, Uber credit, and other branded vouchers, while the downstream handling and commercial value of submitted data remain difficult to establish.
- The homepage displays prize-entry offers including an iPhone X, iPhone 7, $500 Virgin Australia gift card, Netflix subscription, VISA Cash, PayPal Cash, Uber credit, and other branded vouchers.
- The homepage contains one sensitive lead-capture/contest-entry form whose destination was assessed as untrusted.
- External reputation telemetry records 9 malicious detections, 2 suspicious detections, and a confirmed blacklist status for the domain.
Regulatory Verification Notes
The legal and privacy disclosures identify AGC Promotions Pty Ltd and EMBR Group Pty Ltd, with ABN references, and state that information is handled in connection with AussieGiftCard.com under the Privacy Act 1988. They also state that entrant information may be used by advertisers, sponsors, and third parties, including financial-product advertisers and entities outside Australia. This creates a material disclosure and data-governance verification requirement because the precise parties receiving the information, the scope of onward use, and the applicable protections are not clear from the supplied page content. No licensing claim or license number is disclosed in the available material; that is a regulatory verification gap rather than, by itself, proof of fraud. A valid transport certificate confirms encrypted transport, not the identity or authorization of the operator.
- The homepage privacy disclosure names AGC Promotions Pty Ltd, ABN 96 617 236 898, and EMBR Group Pty Ltd, ABN 274 178 375 87.
- The homepage states that entrant information may be shared with advertisers, sponsors, and third parties in the USA, EU, New Zealand, India, and the Philippines.
- The domain was registered in 2015 and is recorded as approximately 11.57 years old.
- Archive records span 2016-12-16 to 2025-10-16, with 10 years tracked.
- The site is served from AS13335, Cloudflare, Inc.; its TLS certificate is issued by WE1, uses DV validation, and is valid to 2026-10-30.
What to Verify Next
Before any submission, an independent check should confirm that AGC Promotions Pty Ltd and EMBR Group Pty Ltd exist under the stated ABNs and that their relationship with the website is current. The published terms, winners information, and privacy policy should be reviewed for verifiable draw rules, winner-selection and fulfilment procedures, retention periods, third-party recipient categories, international-transfer safeguards, and a workable withdrawal or data-deletion process. Any claimed promotional authorization or sector-specific regulatory status should be checked directly with the relevant Australian registry or authority rather than inferred from the website. Official contact channels should be confirmed through an independent, offline route before personal information is provided.
- The site provides internal links to Terms and Conditions, Privacy Policy, Winners, and Contact pages.
- The homepage states that completing entrant details constitutes consent to promotional communications and third-party offers.
- The site’s stated legal entities and ABNs provide specific identifiers for independent corporate and regulatory verification.
Summary Verdict
The overall posture is critical, with the available evidence unsuitable for sensitive interaction. The site’s apparent promotional purpose does not resolve the combination of confirmed external reputation concerns, an untrusted data-collection path, and unresolved operator and data-use verification questions.
Infrastructure Integrity
Cloudflare CDN/WAF protection and edge-only delivery provide a mitigating layer against direct exposure of the origin environment, but they do not establish legitimacy and can limit independent assessment of the underlying host. Observed infrastructure consists of Cloudflare edge addresses in the United States, with no origin candidate identified in this analysis.
Closing Assessment
Prospective users should restrict activity to passive viewing and should not submit personal information, credentials, or financial details unless the operator, promotional mechanics, and data-handling arrangements have first been independently validated.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, governance, analysis engine, page content, external reputation.
01 Governance Risk
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - A form asking for sensitive information submits somewhere TrustSniffer could not verify, which caps how far the score can rise.Governance
rule:GOV_SENSITIVE_FORM_UNTRUSTED - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page asks visitors for sensitive information.Page content
rule:PAGE_FORM_SENSITIVE - A form on the page submits to a destination TrustSniffer could not verify.Page content
rule:PAGE_FORM_UNTRUSTED_DEST - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of aussiegiftcard.com.
- The request stayed on aussiegiftcard.com. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-01-27. Noted
- The earliest public archive of this site is from 2016-12-16. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3037::6815:d58 |
| Name servers | ARA.NS.CLOUDFLARE.COM, JAMES.NS.CLOUDFLARE.COM |
| SSL issuer | WE1 |
| SSL expiry | 2026-10-30 |
| Domain age | 11.57 years (continuous registration) |
| Domain expiry | 2027-01-27 |
| Archive first seen | 2016-12-16 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about aussiegiftcard.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.