Verdict
bookresellertool.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Expired-domain landing page hosted by Namecheap: informs visitor that bookresellertool.com registration expired, shows renewal instructions and links to domain auctions. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 12 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 3% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | 1.1 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is an expired-domain landing page for bookresellertool.com, informing visitors that the registration has lapsed and directing the former registrant toward renewal instructions while promoting domain auctions and related marketplace listings rather than offering an active product or service.
Scam/Impersonation Risk
The site presents no observed brand-impersonation, phishing-form, or conflicting legal-identity signal; however, the domain is subject to a confirmed blacklist finding and multiple external malicious detections. This is a material contradiction to the otherwise relatively benign, informational appearance of the landing page. The single abuse report associated with the hosting IP is attributed to shared provider infrastructure, so it is supporting context rather than proof that the page itself generated the reported activity. The appropriate posture is to treat the domain as unsuitable for login, credential submission, payment, or other sensitive interaction.
- Homepage content identifies the domain as expired and provides renewal instructions rather than an operating business service.
- External reputation assessment recorded 12 malicious detections and 1 suspicious detection, with a confirmed blacklist status.
- The hosting-IP abuse record contains 1 report, attributed to shared Namecheap infrastructure rather than uniquely to the website.
Regulatory Verification Notes
The homepage identifies Namecheap as the registrar-facing service and promotes renewal and auction functions, but it does not present an operating-company identity, regulated-service claim, license, or registration number. That is consistent with a parked-domain notice, not evidence of a regulated business. The available broker-reputation context contains no matching signal, but this does not establish legal status or offset the external threat findings.
- The homepage is titled and presented as a Namecheap expired-domain notice.
- The homepage contains no license number, regulated-business disclosure, or operating-company identity.
- Domain registration records show NAMECHEAP INC as registrar; registration began in 2025 and the domain is approximately 1.05 years old.
- The site's transport encryption uses a DV certificate issued by YE2, valid through 2026-11-08.
What to Verify Next
Before any interaction beyond passive viewing, the domain's current status should be confirmed independently through the registrar or applicable domain registry. Any renewal or auction activity should be initiated only through a separately verified registrar channel, with payment protection and transaction records retained; credentials should not be entered through links reached from the page.
- The homepage directs registrants to sign in to a Namecheap account and select the domain for renewal.
- The homepage links visitors toward domain-auction listings and an auction application, creating a need to validate the destination independently.
- The site's lack of an active business identity means any claimed affiliation or transaction counterparty should be confirmed through an offline or independently sourced channel.
Summary Verdict
The overall posture is critical, with the available evidence indicating that the domain should not be trusted for sensitive interaction. Its parked-domain presentation does not resolve the material external threat contradiction or independently establish a legitimate real-world operator.
Infrastructure Integrity
The site is hosted directly on AS22612, operated by Namecheap, Inc. in the United States, with no CDN detected and two likely origin-IP candidates. The direct hosting arrangement provides limited intermediary shielding; the valid DV TLS certificate is a basic transport-control measure only and does not establish site legitimacy.
Closing Assessment
The domain should be limited to passive observation, while renewal, auction, credential, payment, and account activity should be conducted only through independently verified registrar channels.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 104.219.250.37 (Namecheap, Inc., Data Center/Web Hosting/Transit), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of bookresellertool.com.
- The request stayed on bookresellertool.com. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by registrar-servers.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-04. Noted
- It is hosted on NAMECHEAP-NET, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | NAMECHEAP-NET - Namecheap, Inc., US |
| Country | US |
| Server IP | 104.219.250.37 |
| Name servers | DNS101.REGISTRAR-SERVERS.COM, DNS102.REGISTRAR-SERVERS.COM |
| SSL issuer | YE2 |
| SSL expiry | 2026-11-08 |
| Domain age | 1.05 years (continuous registration) |
| Domain expiry | 2027-08-04 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 12 flagged | AbuseIPDB: 3% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about bookresellertool.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.