Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
bitfoots.com shows high-risk / scam indicators.
| What this site appears to be | A Finnish-language Google interstitial page focused on cookie consent, language selection and sign-in prompt. Contains privacy and terms links and consent buttons. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 39% confidenceAbuseIPDB, 41 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website at bitfoots.com presents a Finnish-language, Google-branded search interstitial with cookie-consent controls, language selection, privacy and terms links, and a sign-in prompt; its apparent purpose is to imitate or relay a Google search experience rather than present an independent commercial service.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. A blacklist hit is confirmed, and the captured Google-style interface is hosted on bitfoots.com rather than an established Google domain, creating a material impersonation concern even though the page itself contains no obvious malicious form. Interaction testing also identified semantic cloaking and three suspicious inline scripts; the benign-looking initial page therefore cannot be treated as reliable evidence of the site's behavior after interaction. Abuse reports associated with one shared delivery IP are a secondary signal attributed to shared infrastructure, but they do not remove the significance of the confirmed blacklist status.
- The homepage presents the title “Google,” Finnish search-interface text, Google navigation elements, and sign-in prompts on bitfoots.com.
- Interaction testing classified the page as showing semantic cloaking and identified 3 suspicious inline scripts across 3 successful runs.
- The domain is recorded as registered on 2026-09-22 and approximately 0.07 years old.
- Historical coverage records 3 archive snapshots spanning 2026–2026, covering 1 tracked year.
Regulatory Verification Notes
The captured page provides privacy, terms, cookie, and language controls but does not independently establish the real-world operator of bitfoots.com or demonstrate authorization to present Google branding. Identity verification remains unverified. No broker-dataset match was identified; that absence is contextual only and does not resolve the confirmed security concern. The page is informational in appearance, but its presentation and observed behavior are inconsistent with treating it as an authenticated Google access point.
- The homepage contains links labelled for privacy, terms, settings, and cookie personalization, but no independently verified operator identity is established in the captured content.
- The page contains no disclosed licensing or registration claim relevant to the operator of bitfoots.com.
- No matching broker reputation record was identified.
What to Verify Next
Before any authentication or sensitive interaction, independently confirm that the intended service is reached through an official Google-published domain or application, rather than relying on the page's branding or sign-in prompt. Confirm the domain through an offline or independently sourced channel, and preserve browser, endpoint, and network telemetry if the page is encountered in an enterprise environment. Do not download files, reuse credentials, or authorize financial activity until the domain's legitimacy has been independently established.
- The captured homepage uses Google branding and sign-in language while being served from bitfoots.com.
- The page's post-interaction behavior was classified as cloaking, making visual inspection alone insufficient for validation.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. The available evidence is consistent with a deceptive or compromised web presentation whose apparent benign purpose does not offset the confirmed external threat designation and behavioral contradictions.
Infrastructure Integrity
The site is delivered through Fastly's CDN/WAF infrastructure, with all observed addresses belonging to CDN edge servers and no origin server address observable in this analysis. This provides some exposure mitigation at the network layer, but it does not establish legitimacy or offset the site's reputation and behavior findings.
- Hosted on AS54113 (FASTLY - Fastly, Inc., US); observed service country: US.
- TLS certificate issued by YR2 with DV validation, valid to 2026-12-20T23:15:04+00:00.
- Four observed addresses were CDN edge addresses, with 0 origin candidates identified.
Closing Assessment
The appropriate disposition is to block or isolate the site for sensitive use and require independent domain confirmation before any credentials, authentication tokens, downloads, or financial actions are permitted.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, history in the web archive, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Behaviour in a sandbox
- The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
05 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 41 reports on hosting IP 185.199.110.153 (GitHub, Inc., Content Delivery Network), 39% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bitfoots.com.
- The request for bitfoots.com ended on www.google.com, a different domain. Watch
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by registrar-servers.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-22. Noted
- The earliest public archive of this site is from 2026-09-22. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 185.199.110.153 |
| Name servers | DNS1.REGISTRAR-SERVERS.COM, DNS2.REGISTRAR-SERVERS.COM |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YR2 |
| SSL expiry | 2026-12-20 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-22 |
| Archive first seen | 2026-09-22 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 39% confidence, 41 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bitfoots.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.