Is efb-platforms.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

EFB PLATFORMS is a corporate B2B website presenting engineered floating infrastructure for mining operations, including barge systems, VTP integration, manifold design, technical consulting, and turnkey project delivery. Its apparent business model is to sell engineered on-pond infrastructure and related technical services to mining operators, integrators, and EPCM partners.

Scam/Impersonation Risk

The site’s homepage presents a coherent industrial-engineering proposition, describing “Barge Standard for Mining,” hydrostatic stability, VTP torque management, HSE and QA/QC validation, and an “EFB Inside” reliability concept. It also makes strong authority claims, including “the authoritative engineering standard,” “unparalleled naval architecture,” and references to Minsur, Chinalco, and Nexa standards. However, this professionally presented content conflicts with confirmed external security detections: the domain is blacklisted by multiple external sources, with malicious and suspicious classifications recorded. No conflicting legal-entity names, brand impersonation, phishing form, login mechanism, or wallet-draining behavior were observed in the supplied page analysis, but the external reputation contradiction is sufficiently material that the website should not be treated as safe for sensitive interaction. The domain’s historical continuity is a positive provenance signal, but it does not neutralize the current security warning.

Regulatory Verification Notes

The website appears to describe engineering and project-delivery services rather than a financial product or explicitly regulated activity. Its claims of hydrostatic certification, HSE validation, QA/QC homologation, and compliance describe operational or technical standards, but the supplied content does not establish the legal identity of the operator or independently verify those claims. No licensing authority or license number is claimed in the available business-model evidence, so any regulatory or corporate qualification relevant to a prospective mining engagement remains a transparency and verification matter rather than proof of misconduct. Registration privacy is an administrative limitation and is not, by itself, an identity contradiction. A separate broker-reputation dataset produced no name match.

What to Verify Next

Before any commercial engagement, the proposed contracting entity should be matched against an independently obtained corporate registry record and the office address and contact channels should be confirmed through an offline or independently sourced route. Technical certifications, HSE and QA/QC claims, named client standards, and any claimed project references should be validated directly with the relevant operators, certifying bodies, or procurement contacts. Payment instructions and contract signatories should be checked against independently confirmed corporate records before funds, credentials, or confidential engineering information are exchanged.

Summary Verdict

The overall posture is critical and unsuitable for sensitive interaction. The site has a plausible corporate presentation and substantial historical continuity, but those positive characteristics are outweighed by the confirmed external security contradiction and the absence of independently verified operator identity. The available evidence does not support treating the domain as trustworthy for credentials, financial activity, or binding commercial commitments.

Infrastructure Integrity

The site resolves directly to one identified address, with no trusted CDN or WAF detected; the hosting environment is TIER-NET - Tier.Net Technologies LLC, US, on AS397423, while the recorded network country is GB. Direct hosting provides less intermediary protection than a mainstream edge network, and the infrastructure data includes a low-confidence geographic registry mismatch; these are contextual infrastructure observations, not proof of malicious activity.

Closing Assessment

Sensitive credentials, payments, confidential information, and contractual commitments should not be submitted through the site unless the operator, technical claims, and transaction channels have first been independently validated.