Verdict
ethusa.net shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Minimal parked-domain page indicating ethusa.net has expired and may be for sale. Contains links to Terms of Service and Privacy Policy but no active service, forms, or social links. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Listed as unsafeGoogle | Risk |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 1.1 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a minimal parked-domain landing page for ethusa.net. It tells visitors that the domain has expired, may be for sale, and provides only general information links alongside Terms of Service and Privacy Policy pages; it does not present an active commercial service, account function, or transaction workflow.
Scam/Impersonation Risk
The site carries a critical security concern because independent external detections identify the domain as malicious and blacklisted. Google Safe Browsing reported a malicious match, and the available threat intelligence recorded detections associated with social engineering; these signals materially outweigh the otherwise limited and apparently benign behavior of the parked page. No brand impersonation or active phishing form was observed in the page content itself, but the confirmed blacklist status means the domain should not be used for login, credential submission, payment, or other sensitive interaction.
- Homepage: displays only an expired-domain and possible-sale notice, with no login form, sensitive form, or active service.
- External reputation telemetry: Google Safe Browsing marked the domain malicious; 16 detections were malicious and 2 were suspicious, with blacklist confirmation from Google Safe Browsing, VirusTotal, and an additional external blacklist.
- Browser behavior: 2 of 2 runs completed successfully with 0 external requests, 0 wallet-connection runs, 0 hidden forms, and no clipboard-hijacking activity.
Regulatory Verification Notes
The available pages do not identify an operating company, regulated service, or licensing basis. Because the domain is presented as parked and for sale rather than as an operating business, the absence of a service disclosure is a material identity and governance limitation rather than evidence of a specific regulated activity. The real-world operator remains unverified, and ownership opacity further limits attribution. A valid transport certificate and identifiable registrar are infrastructure facts only; they do not establish ownership, licensing, or legitimacy.
- Homepage: contains links to Terms of Service and Privacy Policy but does not name an operating legal entity or disclose a license or registration number.
- Domain registration record: registered 2025-08-02, approximately 1.05 years old, through Global Domain Group LLC.
- Transport encryption: TLS certificate issued by YR1 at DV validation level, valid through 2026-10-31.
What to Verify Next
Before any sensitive interaction, independently confirm that the domain is still intended to represent the claimed party and that any proposed operator can be matched to a reliable corporate or regulatory record. The Terms of Service and Privacy Policy should be reviewed for a named entity, jurisdiction, governing law, and a functioning contact route; if those elements are absent, the domain should remain limited to passive viewing. Any request to renew, purchase, log in, provide credentials, or transmit funds should be validated through an independently sourced channel rather than through the parked page.
- Terms of Service and Privacy Policy pages: the available page set provides disclosure documents but no confirmed operating-entity attribution.
- Homepage: provides no active service workflow or account function against which an operator could be authenticated.
- Independent verification requirement: the site content alone does not establish a regulated business relationship or a trustworthy payment destination.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. The evidence supports treating the domain as a security-risk indicator rather than as an established business website, while its real-world identity remains unverified.
Infrastructure Integrity
The domain resolves directly to infrastructure operated by TRELLIAN-AS-AP, with no trusted CDN or WAF layer identified and a likely origin address exposed. This infrastructure may support basic availability, but it provides no meaningful assurance of operator legitimacy and does not offset the external reputation findings.
- Hosting infrastructure: served from AS133618, TRELLIAN-AS-AP — Trellian Pty. Limited, AU; resolved IP 103.224.212.122.
- Network posture: 1 unique IP, 0 edge IPs, and 1 likely origin IP; no CDN detected.
- Registry and location: APNIC registry, Australia.
Closing Assessment
The appropriate enterprise disposition is to restrict the domain to passive observation and prevent credential, payment, account, or other sensitive workflows until independent identity and security validation produce a materially different result.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of ethusa.net.
- The request stayed on ethusa.net. It was not redirected to another domain. Clear
- Registration is published under Global Domain Group LLC. Clear
- DNS for this domain is served by abovedomains.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-02. Noted
- It is hosted on TRELLIAN-AS-AP, from a server in AU. Noted
Domain intelligence
| Registrar | Global Domain Group LLC |
|---|---|
| Hosting | TRELLIAN-AS-AP - Trellian Pty. Limited, AU |
| Country | AU |
| Server IP | 103.224.212.122 |
| Name servers | 5772.NS1.ABOVEDOMAINS.COM, 5772.NS2.ABOVEDOMAINS.COM |
| SSL issuer | YR1 |
| SSL expiry | 2026-10-31 |
| Domain age | 1.05 years (continuous registration) |
| Domain expiry | 2027-08-02 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 1 match |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about ethusa.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.