Verdict
daorufa.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A Chinese-language informational site (道儒法-天地人) currently under development. Contains legal/copyright statement and cookie notice referencing Google. No forms, no login, no payment or financial claims present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 3.0 years oldRegistered history | Clear |
| Web archive | Archived since 2018Public history exists | Clear |
| Certificate | Encrypted connectionIssued by WR3 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2018.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a Chinese-language informational portal titled “道儒法-天地人,” presenting cultural and philosophical material while stating that the site is under development. Its apparent purpose is non-transactional content publication; the available pages do not present payments, financial services, or account functionality.
Scam/Impersonation Risk
Contradictory risk signals are present despite the site's apparently informational presentation. External security assessments recorded malicious detections and confirmed blacklist status across multiple sources; this is the decisive risk indicator and warrants treating the domain as potentially compromised, abused, or otherwise unsuitable for sensitive interaction. The behavioral review also identified suspicious inline scripts, elevated external activity, and repeated console errors, although it found no login form, hidden sensitive form, wallet-drainer behavior, or brand-impersonation pattern. A confirmed phishing form was not observed, but the external reputation findings cannot be offset by the site's limited and benign-looking content.
- The homepage presents an under-development informational site with cultural/philosophical content and no transactional interface.
- External reputation checks recorded multiple malicious detections and confirmed blacklist status.
- Browser behavior identified suspicious inline scripts, elevated external activity, and repeated console errors; no hidden sensitive form or wallet-drainer behavior was detected.
- Archive records show first observation on 2018-08-05 and last observation on 2025-07-11, with 8 years tracked.
Regulatory Verification Notes
The site's legal material consists primarily of copyright, trademark, and broad disclaimer language. It identifies “Daorufa” and the site name but does not independently establish a legal operating entity, regulatory status, or applicable license. Because the site presents no financial or regulated service, the absence of a license claim is a transparency and applicability question rather than proof of misconduct; nevertheless, the operator's real-world identity remains unverified. Registration through Squarespace Domains II LLC and valid transport encryption provide technical continuity, not proof of ownership or regulatory standing.
- The legal statement page contains copyright, trademark, and disclaimer provisions but no independently verified legal-entity or license identifier.
- The domain was registered in 2023 and is approximately 2.98 years old; registrar: Squarespace Domains II LLC.
- The resolved server was identified as AS15169 (Google LLC, US); infrastructure records also identify Squarespace, Inc., AS53831, US.
- The TLS certificate is issued by WR3, uses DV validation, and is valid to 2026-09-30.
What to Verify Next
Before any sensitive interaction, an independent source should confirm that this domain is intentionally operated by the cultural project named on the site. The applicable legal entity, jurisdiction, and any required registration should be obtained through an authoritative registry rather than inferred from the site's copyright language. Browser-side script activity and the domain's external reputation should also be rechecked at the time of access, particularly if the site later introduces forms, downloads, authentication, or payments.
- The homepage is explicitly marked as under development, so its present content may not represent the site's future interaction surface.
- The legal statement is the principal identity-related page and does not independently corroborate the operator.
- The current page analysis found no login, payment, or sensitive-data form, providing no basis to approve such functionality if introduced later.
Summary Verdict
The overall posture is critical and cautionary, with sensitive interaction risk taking precedence over the site's limited informational presentation. The website may be suitable only for passive observation, while legitimacy and operator identity should not be treated as established.
Infrastructure Integrity
The site resolves to one IP address, with no CDN detected and a likely origin candidate identified. Protective hosting characteristics are therefore not sufficient to mitigate the external reputation risk, and the infrastructure should be regarded only as a technical delivery arrangement rather than a legitimacy signal.
Closing Assessment
Restrict activity to passive viewing and require independent confirmation of the domain's status before any credential, account, download, or financial interaction.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - The page carried inline scripts written in a style TrustSniffer treats as suspicious.Behaviour in a sandbox
rule:BEHAV_SUSPICIOUS_INLINE_SCRIPTS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of daorufa.com.
- The request stayed on daorufa.com. It was not redirected to another domain. Clear
- Registration is published under Squarespace Domains II LLC. Clear
- DNS for this domain is served by googledomains.com, across 4 name servers. Noted
- The registration is paid up to 2033-08-29. Clear
- The earliest public archive of this site is from 2018-08-05. Clear
- It is hosted on GOOGLE, from a server in US. Noted
Domain intelligence
| Registrar | Squarespace Domains II LLC |
|---|---|
| Hosting | GOOGLE - Google LLC, US |
| Country | US |
| Server IP | 2a00:1450:4010:c02::79 |
| Name servers | NS-CLOUD-C1.GOOGLEDOMAINS.COM, NS-CLOUD-C2.GOOGLEDOMAINS.COM, NS-CLOUD-C3.GOOGLEDOMAINS.COM, NS-CLOUD-C4.GOOGLEDOMAINS.COM |
| SSL issuer | WR3 |
| SSL expiry | 2026-09-30 |
| Domain age | 2.98 years (continuous registration) |
| Domain expiry | 2033-08-29 |
| Archive first seen | 2018-08-05 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about daorufa.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.