Verdict
clearwaterairbnb.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A simple index/directory listing page (Index of /) served by LiteSpeed. Shows minimal content (cgi-bin link and server footer). No forms, social links, or monetization elements detected. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 26% confidenceAbuseIPDB, 5 reports; shared hosting inflates reports | Clear |
| Domain age | 10 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 2021Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a bare server directory for clearwaterairbnb.com, presenting an “Index of /” page with only a cgi-bin entry and a LiteSpeed Web Server footer; it does not currently present a discernible accommodation service, corporate identity, or active commercial business model.
Scam/Impersonation Risk
Contradictions were observed and the site is blacklisted by multiple external sources. External scanning recorded a materially elevated malicious-detection pattern, including detections from Fortinet and Sophos, while the rendered homepage itself is only a minimal directory listing with no forms, scripts, login flow, or visible impersonation content. Five abuse reports are attributed to the shared provider IP rather than conclusively to this domain, so that signal is contextual; it nevertheless compounds the independent blacklist findings. The available evidence does not establish the real-world operator identity, and sensitive interaction should therefore be treated as unsafe.
- Homepage: displays “Index of /”, a cgi-bin link, and a LiteSpeed server footer, with 144 characters of visible text and no forms or interactive transaction features.
- External reputation assessment: 14 malicious detections and 1 suspicious detection were recorded, including Fortinet and Sophos.
- External reputation assessment: the domain is listed by 2 external blacklist sources; Google Safe Browsing was not malicious.
- Registration record: created 2025-10-12 and listed as approximately 0.86 years old.
Regulatory Verification Notes
The public material does not state a licensing position, registration number, regulated status, or identifiable operating entity. This is a material disclosure gap for any site expected to provide accommodation, payment, brokerage, or other regulated services, although the page does not currently show an active commercial offering. Identity verification remains unestablished. A third-party broker-intelligence dataset produced no match, but that is only contextual and does not validate licensing or legitimacy.
- Homepage: contains no company name, legal notice, terms, privacy disclosure, licensing statement, or registration number.
- Transport security: TLS uses YR1 with Domain Validation, valid through 2026-10-12 20:45:58 UTC.
- Page metadata: the title is “Index of /”, with no description, canonical identity, or structured organization data.
What to Verify Next
Before any account, credential, payment, or other sensitive interaction, an institution should establish through an independent source whether this domain is intentionally associated with the claimed accommodation business and whether the underlying operator can be identified. Any proposed regulated activity should be checked against the relevant official licensing register, and contact details should be confirmed through an independently obtained channel rather than information supplied solely by the site. Security teams should also require a fresh endpoint and file-reputation review before permitting access from managed environments.
- Homepage: provides no business description or active service workflow from which an operator or transaction purpose can be confirmed.
- Independent verification: the domain’s intended business relationship and operator identity require confirmation outside the website.
- Regulatory verification: no licensing or registration reference is available on the public page to compare with an official register.
Summary Verdict
The overall posture is critical, with sensitive interaction risk driven by confirmed external threat and blacklist contradictions. The site’s apparent legitimacy and operator identity are not established, and the benign appearance of the directory page is insufficient to offset the stronger adverse evidence.
Infrastructure Integrity
The site resolves directly to infrastructure operated by PONYNET - FranTech Solutions in the United States, AS53667, with no CDN edge or WAF layer observed. A valid DV certificate provides transport encryption, but it does not authenticate the operator or neutralize the external reputation concerns.
- Hosting infrastructure: served from AS53667, PONYNET - FranTech Solutions, US.
- Network resolution: 1 unique IP was observed, with 0 edge IPs and 1 likely origin IP.
- TLS certificate: issued by YR1 at Domain Validation level and valid to 2026-10-12 20:45:58 UTC.
Closing Assessment
The appropriate institutional posture is to block or isolate sensitive interaction and permit access only for controlled, read-only investigation until the domain’s operator, purpose, and external threat status have been independently resolved.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 5 reports on hosting IP 198.251.89.144 (FranTech Solutions, Content Delivery Network), 26% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of clearwaterairbnb.com.
- The request stayed on clearwaterairbnb.com. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC. Clear
- DNS for this domain is served by my-control-panel.com, across 2 name servers. Noted
- The registration is paid up to 2026-10-12. Noted
- The earliest public archive of this site is from 2021-11-28. Clear
- It is hosted on PONYNET, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC |
|---|---|
| Hosting | PONYNET - FranTech Solutions, US |
| Country | US |
| Server IP | 198.251.89.144 |
| Name servers | NS15.MY-CONTROL-PANEL.COM, NS16.MY-CONTROL-PANEL.COM |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-12 |
| Domain age | 0.86 years (continuous registration) |
| Domain expiry | 2026-10-12 |
| Archive first seen | 2021-11-28 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 26% confidence, 5 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about clearwaterairbnb.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.