Verdict
formatc2puntos.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | Small Spanish-language web page for a tic-tac-toe style game (labels: Turno, Reiniciar, Cambiar a, Haz click en una casilla). No forms, links, or monetization visible. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 20 years oldRegistered history | Clear |
| Web archive | Archived since 2006272 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: more than 10 years (registration continuity).
- Public web-archive history exists since 2006.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
formatc2puntos.com presents a small Spanish-language, browser-based tic-tac-toe game titled “FormatC2Puntos,” allowing visitors to place X or O tokens, restart the game, or switch between human and AI play; the visible site appears to be a simple hobby or demonstration project rather than a commercial service.
Scam/Impersonation Risk
The site has a critical security posture because external threat intelligence recorded a confirmed blacklist status and malicious detections, including detections by multiple established security vendors. This is materially inconsistent with the otherwise benign homepage presentation and is sufficient to outweigh the site’s clean, client-side interaction profile. No separate brand-impersonation or conflicting-legal-identity finding is present, but the blacklist evidence means the site should not be treated as safe for sensitive interaction. The domain’s long registration history and substantial archival continuity are positive provenance signals, yet they do not resolve the current external threat concern.
- The domain registration artifact records creation on 2006-06-12 and an age of 20.21 years.
- The web archive records 272 snapshots from 2006 through 2026, spanning 21 tracked years.
- External scanning recorded 14 malicious detections, with Fortinet, Kaspersky, and Sophos among the flagged vendors.
- The external reputation assessment records a confirmed blacklist and an active protective kill-switch condition associated with the malicious-detection threshold.
Regulatory Verification Notes
The reviewed homepage is a minimal game interface and does not present a corporate identity, regulated business purpose, licensing claim, registration number, or legal framework. This is a transparency gap for any organisation considering engagement beyond casual viewing, while the site’s apparent non-commercial game model does not itself establish a regulated activity. The real-world operator remains independently unverified. Technical continuity is evident through an established registrar relationship and valid transport encryption, but those controls do not prove the identity or legitimacy of the operator.
- The homepage contains approximately 148 characters of visible text, no forms, no internal or external links, and no visible monetisation.
- The domain is registered through Tecnocratica Centro de Datos, S.L., with an expiry date of 2027-06-12.
- The site’s TLS certificate is DV-validated, issued by YR2, and valid through 2026-11-02.
What to Verify Next
Before any account, credential, download, payment, or other sensitive interaction is considered, an independent security review should establish why the domain is receiving blacklist detections and whether those detections relate to the current content or infrastructure. Any claimed operator or business purpose should be confirmed through an independently obtained channel rather than relying solely on the website. If the site is intended only as a game, access should remain limited to passive or non-sensitive use until the reputation issue is resolved.
- The homepage provides no business identity or contact-navigation path from which operator claims could be independently assessed.
- Browser testing recorded two successful runs with no external network activity, no hidden forms, no wallet activity, and no clipboard-write behavior.
- The visible content was classified as a client-side interactive game with no detected sensitive form or monetisation mechanism.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. Although the visible application is technically simple and appears benign in function, the confirmed external blacklist and malicious-detection evidence prevent the site from being regarded as trustworthy or identity-established.
Infrastructure Integrity
The site resolves directly to one apparent origin address rather than a CDN edge, with hosting provided by andaina - Jose Antonio Vazquez Quian in Spain on AS203280. No CDN or WAF was detected; the valid DV TLS certificate protects transport confidentiality but provides only limited assurance about the operator.
Closing Assessment
Prospective users should restrict activity to non-sensitive viewing and avoid credentials, downloads, financial activity, or other consequential interactions unless an independent security review clears the domain.
Written analysis generated 2026-08-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of formatc2puntos.com.
- The request stayed on formatc2puntos.com. It was not redirected to another domain. Clear
- Registration is published under Tecnocratica Centro de Datos, S.L.. Clear
- DNS for this domain is served by andaina.net, across 3 name servers. Noted
- The registration is paid up to 2027-06-12. Noted
- The earliest public archive of this site is from 2006-11-09. Clear
- It is hosted on andaina, from a server in ES. Noted
Domain intelligence
| Registrar | Tecnocratica Centro de Datos, S.L. |
|---|---|
| Hosting | andaina - Jose Antonio Vazquez Quian, ES |
| Country | ES |
| Server IP | 185.140.32.30 |
| Name servers | NS1.ANDAINA.NET, NS2.ANDAINA.NET, NS3.ANDAINA.NET |
| SSL issuer | YR2 |
| SSL expiry | 2026-11-02 |
| Domain age | 20.21 years (continuous registration) |
| Domain expiry | 2027-06-12 |
| Archive first seen | 2006-11-09 |
| Archive snapshots | 272 |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about formatc2puntos.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.