Is cyberleek.lol safe? TrustSniffer's low-trust assessment: 35/100

Overview

This website is a single-page promotional site titled "$TSUMIGI — Good Dog. Good Coin.", which presents a dog-themed crypto token under a meme-coin branding style. Its apparent purpose is to promote the token to visitors, most likely to drive token acquisition or community sign-up. It sits on a very recently registered domain with a novelty top-level domain.

Scam/Impersonation Risk

Contradictory signals are present. The domain is blacklisted by external threat-reputation sources: one source flags it as malicious and two more as suspicious. Page capture, archive and reputation checks also show indicators consistent with known phishing association. Together these push the assessment into a clearly cautionary, security-forward posture. The domain was registered only a couple of months ago and has almost no independent history, which is the profile typically seen in short-lived token promotions and in infrastructure built for rapid monetisation. The page is also themed around a speculative token, a category where fake launches and rug-pull schemes are common. Separately, the hosting address shows a large volume of abuse reports. These apply to a shared hosting address, so they cannot be pinned on this site alone, but they add to the unfavourable reputational picture. In mitigation, automated browsing of the homepage showed no external data posts, no wallet-drainer behaviour, no clipboard manipulation, no hidden forms and no cloaking. No conflicting legal identities and no brand impersonation were observed. The concern rests on the blacklist and the domain's immaturity, not on observed malicious page behaviour. Evidence:

• Homepage: external reputation sources currently list the domain (one malicious and two suspicious detections), and the site is treated as a known-phishing association.
• Domain registration: registered in August 2026 (about 0.19 years old, roughly 68 days), through PDR Ltd. d/b/a PublicDomainRegistry.com, expiring August 2027.
• Web archive: a single snapshot, captured 2026-08-21, so no meaningful historical continuity exists.
• Hosting address: 1,697 abuse reports on the shared address, assessed as shared-infrastructure noise, with a moderate confidence rating.

Regulatory Verification Notes

The homepage is the only page analysed. It shows no verifiable corporate entity, licensing or registration detail, and no regulator reference. For a token-promotion site, this means no basis exists for assuming any investor-protection, securities or virtual-asset service regime applies. No third-party broker or regulatory-database match was found, so no external signal of regulatory standing exists in either direction. This is a verification gap and not, by itself, evidence of wrongdoing, but combined with the blacklist it leaves nothing to offset the reputational risk. The site's technical hygiene is basic: it has a valid certificate, but certificate validation is domain-only and confirms nothing about the operator. Evidence:

• Hosting infrastructure: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (DV, domain validation only), valid to 2027-01-15.
• Digital-asset directories: the domain does not appear in the DeFi directory checked, so no TVL or protocol recognition exists.
• Homepage: no company name, licence number or regulator reference is published.

What to Verify Next

Any interaction with the token should wait until the operator is independently identified. The project's claimed team, token contract address and any audit reports should be checked against sources outside this site, such as a block explorer and the official channels of established token-tracking platforms. Any claimed licence or registration should be confirmed directly with the relevant registry, using the registry's own search and not links supplied on the site. Official contact and community channels should be confirmed through an independent route. The domain's blacklist status should also be rechecked after a period, since listings can change as the site is cleaned up or as further reports arrive. Evidence:

• Homepage: the token branding gives no project documentation, team detail or contract reference to check against.
• Domain registration: the roughly two-month-old registration means no long track record exists to lean on.
• Reputation sources: the current external listings are the key item to recheck.

Summary Verdict

The site is assessed at an elevated risk level and in the low-trust band. A confirmed external blacklist and a very young, thinly documented domain outweigh its clean page behaviour and valid transport encryption. The available evidence does not support treating it as a legitimate or established operation, and the real-world operator remains unidentified.

Infrastructure Integrity

The site is delivered through an AWS CDN/WAF layer, and every observed address is an edge address, so the origin server was not visible. This protection is a mitigating factor only. It cannot offset the external threat detections, and edge-only visibility makes it harder to verify the true host and easier to swap content quickly. A heuristic flagged the domain's youth and sparse subdomain footprint, but that is unconfirmed and carries little weight on its own.

Closing Assessment

Passive viewing of the page is the only use consistent with the evidence. Logging in, entering credentials, connecting a wallet or making any payment or token purchase should be avoided until the operator is independently identified and the external listings are cleared.

Signals weighed against the site

• AbuseIPDB: 1697 reports on hosting IP 35.157.26.135 (A100 ROW GmbH, Data Center/Web Hosting/Transit), 31% confidence. The reports are attributed to shared infrastructure, not specifically to this website.