---
title: "Is itthunder.org a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "itthunder.org"
verdict: "Critical Risk"
title: "Is itthunder.org a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 64
canonical_url: https://trustsniffer.com/report/itthunder.org
assessed: 2026-10-21
---

# Is itthunder.org a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** itthunder.org shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-21 by automated analysis. Classification confidence 64%.

| Field | Value |
| --- | --- |
| What this site appears to be | The page is an error screen showing only 'DApp', a red cross mark and '404'. It has no service description, links, forms or metadata, so its purpose and economic model cannot be determined. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 22 days old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (2 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by YE2) | Noted |

## The page as captured


![Screenshot of the itthunder.org homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/itthunder.org/screenshots/first.png)

_What itthunder.org served when TrustSniffer captured it on 2026-10-21. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

itthunder.org is a very recently registered website whose captured landing page is a bare error screen showing only the word "DApp", a red cross mark and a "404" code. The page has no service description, navigation, forms, branding or metadata. The "DApp" label suggests a decentralized-application front end, but no product, monetization model or business purpose can be determined from what the site presents.


### Scam/Impersonation Risk

The site is flagged by external threat-intelligence sources, which makes this the decisive concern. A confirmed blacklist hit exists against the domain, supported by at least one engine rating it malicious and another rating it suspicious. This is the only contradiction present. No brand impersonation, no conflicting legal identities and no on-page phishing mechanics were observed. The captured page has no login form, no hidden forms and no credential-collection surface. Behavioral testing found no cloaking, wallet-drainer activity, clipboard hijacking or unrecognized outbound posts across three successful runs. This means the risk comes from reputation and context, not from observed malicious page behavior. The context is a domain only days old that carries a blacklist flag and a landing page with no stated purpose. That pairing is typical of infrastructure staged ahead of later content, and a page that is empty today can be swapped for a wallet-connection or login flow later. The reputation flag cannot be set aside simply because the current page is inert. Evidence:

- Homepage: the captured page contains only "DApp", a red cross and "404", with no links, forms or metadata, so no verifiable service or claim exists to assess.
- Domain registration: registered on 2026-09-29 (~0.06 years old, about three weeks).
- Web archive: only 2 snapshots, both from 2026 (1 year tracked), so there is no meaningful operating history.
- Reputation checks: an external blacklist hit is recorded, with one malicious and one suspicious engine verdict against the domain.

### Regulatory Verification Notes

The page names no company, operator, jurisdiction, licence or registration number, and it has no terms, privacy or about pages. This is a content gap on the website itself. The real-world operator has not been independently connected to any brand or person, so no claim of legitimacy can rest on identity. No third-party broker or regulatory-register match exists, and no licensing claim is made on the page, so there is nothing to confirm or refute on that front. The technical hygiene is basic and does not offset the reputation concern. The site uses a valid TLS certificate with domain-level validation only, which proves encryption in transit and nothing about who operates the site. Evidence:

- Homepage: no legal entity, licence, registration number or contact channel is displayed anywhere on the captured page.
- Registrar: the domain is registered through Gname.com Pte. Ltd., with registration running to 2027-09-29.
- Transport encryption: TLS certificate issued by YE2 (DV), valid to 2026-12-28, about 67 days remaining at analysis time.
- Hosting: served from AS13335 (Cloudflare, Inc., US).

### What to Verify Next

Any dealings should start by establishing who runs this domain and whether it is genuinely connected to a known project. The domain should be traced back from an officially announced channel of a named project or company, and not from a link, advertisement or message received from a third party. The flagged reputation status should be re-checked against current threat-intelligence listings after a further interval. The domain's age and the absence of any content mean that a later content change could alter the picture quickly. Official support and contact channels should be confirmed through an independent route before any engagement. Evidence:

- Homepage: the page publishes no project name, links or social channels that would allow the site to be matched to an official source.
- Reputation checks: current blacklist and engine verdicts apply to this domain as scanned, so they should be re-evaluated if the content changes.
- Behavioral testing: wallet-provider code was detected on the page, but no wallet connection or sensitive-action flow was triggered, so any future prompt to connect a wallet would be a new development.

### Summary Verdict

The assessment is clearly cautionary. A confirmed external blacklist flag on a days-old domain with no identifiable operator and no substantive content outweighs the basic technical hygiene present. Nothing observed on the page confirms an active attack, but nothing supports trust either, and the overall posture is elevated risk.


### Infrastructure Integrity

The domain is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so no origin host could be independently identified. This arrangement is a mitigating factor only. It does not vouch for the operator, and it also prevents independent verification of the hosting behind the site, which can mask a rapid content swap. The domain's recency and sparse DNS footprint match a young-domain heuristic, which is unconfirmed and carries no weight beyond the other findings.


### Closing Assessment

The site should be treated as read-only at most. Wallet connections, account logins, credential entry and any payment or transfer of funds should be avoided until the blacklist status is cleared and an official, independently confirmed operator emerges.


_Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive.

### 01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`)

### 02 Page content
- The page loaded on its own domain but had no readable content. (Page content `rule:PAGE_CONTENT_EMPTY`)
- The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`)
- The page content shows at least one warning sign that deceptive sites commonly use. (Page content `rule:PAGE_RED_FLAGS_SOME`)

### 03 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of itthunder.org.

- The request stayed on itthunder.org. It was not redirected to another domain. (Clear)
- Registration is published under Gname.com Pte. Ltd.. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-09-29. (Noted)
- The earliest public archive of this site is from 2026-09-29. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Gname.com Pte. Ltd. |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::ac43:a63f |
| Name servers | brit.ns.cloudflare.com, javon.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-28 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-29 |
| Archive first seen | 2026-09-29 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about itthunder.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [sinport.org](https://trustsniffer.com/report/sinport.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [rpsrescue.org](https://trustsniffer.com/report/rpsrescue.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [catevent.org](https://trustsniffer.com/report/catevent.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [adstart.org](https://trustsniffer.com/report/adstart.org), another .org site assessed as critical-risk (Critical Risk, 11/100)
- [hifibridge.org](https://trustsniffer.com/report/hifibridge.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [blaze-stake.org](https://trustsniffer.com/report/blaze-stake.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [amlview.org](https://trustsniffer.com/report/amlview.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [amlbinances.org](https://trustsniffer.com/report/amlbinances.org), another .org site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-ibt.netlify.app](https://trustsniffer.com/report/portal-moonshot-ibt.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-cjq.netlify.app](https://trustsniffer.com/report/portal-moonshot-cjq.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)
- [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/itthunder.org) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/itthunder.org · assessed 2026-10-21.*