Is dogshitonrbh.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

The website is a very recently registered domain whose homepage presents only a minimal page titled "Cloudflare Registrar" behind an automated bot-challenge screen. It shows a visitor no products, services, company description or contact details, so its purpose or business model cannot be determined from the content, and its real-world operator has not been independently established.

Scam/Impersonation Risk

This domain shows confirmed adverse reputation. It is blacklisted by external threat-intelligence sources: several independent detection engines classify it as malicious, and a further engine marks it suspicious. The page title borrows the name of a well-known domain registrar, while the domain name has no apparent connection to that registrar. A mismatch like this is common in lookalike or lure pages, but no brand impersonation, conflicting legal identities or phishing form was positively confirmed. The blacklisting is the decisive finding, and it is compounded by the domain's very recent creation. Browser-behaviour testing found no wallet-connection attempts, clipboard manipulation, hidden forms, credential forms posting off-site or fingerprinting. It did observe an unusually large page rewrite after interaction and a traffic profile dominated by third-party requests. These behaviours are not conclusive alone, but they are consistent with content that changes after load and with a thin page that loads most of its resources from elsewhere. The posture is cautionary, and credential entry, logins and any financial interaction are unsafe uses of this site. Read-only viewing is the only use consistent with the evidence. Evidence:

• Homepage: titled "Cloudflare Registrar" with only a very short block of visible text, shown behind a bot-challenge screen, and offering no product, company or contact information.
• Domain registration: created 2026-09-09 (~0.12 years, ~43 days old), so there is no established history to offset the adverse reputation.
• Reputation checks: 2 detection engines flag the domain as malicious and 1 as suspicious; Google Safe Browsing did not flag it.
• Browser-behaviour testing: 3 of 3 runs completed; the page changed by about 4,028 DOM mutations after interaction, and about 98% of observed requests went to external hosts (50 external XHR/fetch calls and 6 external POSTs, all to known destinations).

Regulatory Verification Notes

No financial licence, registration number, company name or regulator reference is presented on the captured homepage. No third-party broker or regulatory-reputation entry exists for this domain. The site makes no regulated-activity claims, so there is no licensing assertion to test. Identity-to-brand linkage remains unestablished, and no claim on the page should be read as proof of who operates the site. The domain is registered through the corporate registrar Cloudflare, Inc., and the site uses a valid, mainstream domain-validated transport certificate. These are baseline hygiene measures available to any registrant, including short-lived or hostile ones. They do not offset the adverse threat-intelligence findings. Evidence:

• Domain registration: registrar Cloudflare, Inc.; registered 2026-09-09, expiring 2027-09-09.
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-08.
• Homepage: no licence, registration number, legal entity name or regulator reference appears on the captured page.
• Third-party broker reputation: no match found for this domain.

What to Verify Next

Before any interaction beyond viewing, the operator's identity should be established independently, using an official channel obtained from outside the site. If the site claims affiliation with a registrar or any other business, that affiliation should be confirmed directly with the named organisation through its own published contact route. The domain's current standing should be re-checked with the major reputation services after some time, since a short-lived site's classification can change quickly. Anyone who has already submitted credentials, payment details or wallet permissions to the site should treat them as exposed and rotate or revoke them. Evidence:

• Homepage: the registrar-style title is not matched by any visible link to, or statement of association with, an actual registrar.
• Domain registration: created 2026-09-09, so no long-standing independent record of the operator exists.
• Reputation checks: current adverse detections (2 malicious, 1 suspicious) should be re-checked for changes before any reassessment.

Summary Verdict

The evidence supports an elevated-risk posture. Confirmed blacklisting on multiple threat-intelligence engines and a domain created only weeks ago outweigh the site's baseline technical hygiene. Identity is unverified, and nothing observed offers a reason to treat the site as legitimate.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and web-application firewall (AS13335, Cloudflare, Inc., US), and all four observed addresses are edge nodes. The origin server was not observable, so the real hosting location cannot be verified independently. The edge-only visibility also means content can be swapped without any change at the network layer. The protection is a mitigating factor only. It improves availability and filtering but says nothing about the operator's intent, and it cannot offset the reputation findings.

Closing Assessment

The site should not be used for logins, credential entry, payments or wallet interactions. Any contact with it should be limited to passive viewing from a protected environment, and nothing should be downloaded.