--- title: "Is bubblemaps.live a Scam? Trust Score 5/100" source: TrustSniffer type: Website trust & fraud report subject: "bubblemaps.live" verdict: "Critical Risk" title: "Is bubblemaps.live a Scam? Risk Report, Score 5/100" trust_score: 5 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/bubblemaps.live assessed: 2026-10-27 --- # Is bubblemaps.live a scam? TrustSniffer's high-risk assessment: 5/100 ## Verdict **Verdict: Critical Risk, trust score 5/100.** bubblemaps.live shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-27 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 15 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 8 months old (Most scam domains are under a year old) | Watch | | Web archive | Archived since 2025 (4 snapshots) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the bubblemaps.live homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/bubblemaps.live/screenshots/first.png) _What bubblemaps.live served when TrustSniffer captured it on 2026-10-27. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2025. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. This website presents itself as an onchain intelligence platform. Its homepage is titled "The Onchain Intelligence Layer" and carries the Bubblemaps name. The captured page is a short text-based landing page. Its content does not clearly establish a business model or a verifiable operator, so its purpose cannot be confirmed from the evidence. ### Scam/Impersonation Risk This is the dominant concern. A broad set of independent security engines currently flags the domain as malicious, and several of the most widely deployed security vendors are among them. Those detections are corroborated by a confirmed blacklist listing and by a phishing-known marker in the domain's reputation history. The site reuses an established-sounding brand name in its page title on a recently registered domain with an uncommon top-level domain. That combination is a recognised pattern for brand-lookalike and credential-harvesting infrastructure. No conflicting legal entities were found, and no direct brand-impersonation finding was recorded. The risk rests on the reputation evidence, not on identity inconsistencies. Behavioural testing found no wallet-drainer routines, clipboard manipulation, hidden forms, or credential posts to external destinations. Cloaking was not observed either. However, the homepage generated heavy third-party network traffic, including a POST to a destination outside the recognised service set, and a high volume of script errors. These are consistent with unstable or hastily assembled front-end code. They do not offset the threat-intelligence detections, and a clean behavioural run on a single page does not exclude later content swaps. Evidence: - Homepage: 15 security engines flagged the domain as malicious and 2 as suspicious, including three tier-one vendors. - Domain registration: registered 2026-08-06 (~0.22 years, about 81 days old). Archive captures begin in January 2025, before the current registration date. - Web archive: 4 snapshots spanning 2025–2026 (2 years tracked), a thin and sparse history. - Homepage behavioural runs: 64 external XHR requests and 13 external POSTs, of which one POST and one XHR went to a non-whitelisted destination. 30 console errors were recorded, with no wallet-drainer, clipboard, or hidden-form activity. ### Regulatory Verification Notes The captured homepage text does not establish any named legal entity, licence, or registration that could be tested against a registry. The page-level analysis that would normally attribute identity could not be completed, so no operator is independently connected to the site. Registration details are incomplete and show ownership opacity. That is an administrative limitation and not an identity contradiction. No third-party broker or regulator-style reputation entry matched this domain. The adverse picture therefore comes from threat-intelligence signals, not from any regulatory finding. The site's valid encryption certificate and identified hosting network are baseline hygiene that phishing infrastructure routinely has. They are not evidence of legitimacy. Evidence: - Homepage: no named operator, licence, or registration number is visible in the captured content. - Hosting network: AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). - Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-02. - Domain registration: registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-08-06 and owner details incomplete. ### What to Verify Next Before any engagement, confirm through the brand's independently known official channels, reached by a route other than this site, whether this domain is an endorsed property. Anyone who has already visited or interacted with the site should treat any credentials or approvals submitted there as potentially exposed and review them accordingly. The reputation status should be re-checked only after the domain's owner publishes a clear remediation or ownership statement. Evidence: - Homepage: the page title uses the Bubblemaps name, but nothing on the captured page ties the domain to that brand's official presence. - Reputation record: the blacklist listing and engine detections are current and unresolved at the time of analysis. ### Summary Verdict The domain carries an elevated-risk posture. Active adverse security detections and a corroborated blacklist listing outweigh every neutral or positive technical signal. Its identity is unconnected to any verified operator, and its age and archive history are shallow. Taken together, the evidence does not support treating the site as trustworthy. ### Infrastructure Integrity The site is served through Cloudflare's CDN and web application firewall. All four observed addresses are edge nodes, and the origin server is not observable. This protective layer is a mitigating factor only. It prevents independent verification of the hosting origin and can mask rapid content changes. It cannot offset the reputational risk recorded against the domain. ### Closing Assessment At most, the site should be treated as read-only content. No login, credential entry, wallet connection, or financial interaction should take place on it. The brand should be reached only through destinations confirmed independently as official. _Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by governance, external reputation, history in the web archive, behaviour in a sandbox, registration and ownership. ### 01 Governance - A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`) ### 02 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 03 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 04 Behaviour in a sandbox - The page sent data to a destination TrustSniffer does not recognise. (Behaviour in a sandbox `rule:BEHAV_NONWHITELISTED_POSTS`) - The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`) ### 05 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of bubblemaps.live. - The request stayed on bubblemaps.live. It was not redirected to another domain. (Clear) - Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-08-06. (Noted) - The earliest public archive of this site is from 2025-01-21. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3036::ac43:8982 | | Name servers | sara.ns.cloudflare.com, jermaine.ns.cloudflare.com | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2027-01-02 | | Domain age | 0.68 years (continuous registration) | | Domain expiry | 2027-08-06 | | Archive first seen | 2025-01-21 | | Archive snapshots | 4 | | Reputation | VirusTotal: 15 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about bubblemaps.live at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [interlinklabs.live](https://trustsniffer.com/report/interlinklabs.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [dovu.live](https://trustsniffer.com/report/dovu.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [orcaclaim.live](https://trustsniffer.com/report/orcaclaim.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpaynet.live](https://trustsniffer.com/report/xrpaynet.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-dapp.live](https://trustsniffer.com/report/xrpl-dapp.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-defi.live](https://trustsniffer.com/report/xrpl-defi.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [xrpl-phase1.live](https://trustsniffer.com/report/xrpl-phase1.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [phase2-xrpl.live](https://trustsniffer.com/report/phase2-xrpl.live), another .live site assessed as critical-risk (Critical Risk, 0/100) - [openedsea.vercel.app](https://trustsniffer.com/report/openedsea.vercel.app), another site assessed as critical-risk (Critical Risk, 4/100) - [send-bep-usdt-bsc.vercel.app](https://trustsniffer.com/report/send-bep-usdt-bsc.vercel.app), another site assessed as critical-risk (Critical Risk, 1/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) --- *Source: [TrustSniffer](https://trustsniffer.com/report/bubblemaps.live) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/bubblemaps.live · assessed 2026-10-27.*