Verdict
crystalbranchtw.blog shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Simple 404 Not Found page. The requested URL was not found on the server; no forms, links, or monetization present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 4 months oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is the domain crystalbranchtw.blog, which currently presents an unavailable or unconfigured web endpoint rather than an identifiable service, business, or consumer-facing offering; its apparent purpose cannot be established from the captured content.
Scam/Impersonation Risk
The site presents a critical interaction risk because the domain is associated with a confirmed external blacklist result and additional security detections, despite the captured page itself containing no login form, payment mechanism, or explicit impersonation content. The blacklist result is a material contradiction that outweighs the otherwise limited page-level findings. No separate identity inconsistency, brand impersonation, or phishing form was observed in the captured page, but the available evidence does not support treating the domain as safe for credentials, account access, or financial activity.
- The external reputation assessment recorded a confirmed blacklist result for the domain.
- A tier-one security detection was present, with two additional suspicious detections recorded.
- The homepage capture returned an HTTP 404 response and contained no forms, links, or monetization features.
- The domain was registered through NAMECHEAP INC on 2026-05-27 and is approximately 0.34 years old.
Regulatory Verification Notes
The captured site does not identify an operator, legal entity, regulated activity, license, registration number, terms of service, or other business documentation. This is a substantial verification gap rather than independent proof of fraud; however, it leaves no reliable on-site basis for establishing who operates the domain or what service it intends to provide. Identity verification remains unconfirmed, and the confirmed external blacklist result means regulatory or commercial engagement should not be inferred from the presence of transport encryption alone.
- The captured homepage is an error page with no legal, corporate, licensing, or service disclosures.
- The observed endpoint was served through AS13335 (CLOUDFLARENET — Cloudflare, Inc., US).
- The TLS certificate was issued by YE2 at DV validation level and is valid to 2026-12-21.
- No third-party broker match was recorded.
What to Verify Next
Before any sensitive interaction, an independent source should establish the domain’s intended operator and confirm whether the domain is officially associated with a known organization. Any claimed financial, commercial, or regulated service should be checked directly against the relevant official registry, while contact channels should be validated through an independently sourced route rather than through the site itself. Security teams should also confirm the blacklist status and any related detections before permitting access from managed environments.
- The available capture provides no operator or service documentation against which an identity claim can be checked.
- The absence of forms and navigable links means the site itself supplies no dependable workflow for validating account or payment activity.
- The current page state does not establish a legitimate business purpose.
Summary Verdict
The website has a critical trust posture with unverified identity and a confirmed external reputation contradiction. The available evidence is insufficient to support sensitive interaction, and the domain should be treated as an elevated security concern rather than an established service.
Infrastructure Integrity
Cloudflare CDN/WAF protection was observed, which can reduce direct exposure of an origin system but is only a mitigating infrastructure measure and does not establish legitimacy. Resolution identified CDN edge infrastructure associated with AS214209 (Internet Magnate), while the origin server was not observable in this analysis.
Closing Assessment
Enterprise controls should block or isolate sensitive interaction with this domain pending independent confirmation of its operator, purpose, and reputation.
Written analysis generated 2026-09-28 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by registration and ownership.
01 Governance Risk
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of crystalbranchtw.blog.
- The request stayed on crystalbranchtw.blog. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-05-27. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::ac43:a417 |
| Name servers | linda.ns.cloudflare.com, marty.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 1 |
| Edge IP addresses | 1 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-21 |
| Domain age | 0.34 years (continuous registration) |
| Domain expiry | 2027-05-27 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about crystalbranchtw.blog at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.