Is jobyweeks.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, narrative-style property presented under the title "Joby Weeks · The Untold Story · #FreeJoby". The homepage frames itself as a personal or campaign-style story built around a hashtag. Its purpose appears to be advocacy or awareness content aimed at a social-media audience. The captured material shows no identifiable product catalogue, checkout or monetisation mechanism, so the business model cannot be stated with confidence.

Scam/Impersonation Risk

Material contradictory signals are present. The domain is blacklisted: several independent security engines, including three major endpoint-security vendors, currently classify it as malicious or suspicious, and the reputation data also associates it with known phishing activity. This is a confirmed adverse reputation finding. It is not an inference from missing information. The domain was also registered only about three months before this assessment, and its public history is a single recent capture. A newly created domain that attracts immediate multi-vendor detections follows a pattern typical of disposable infrastructure used for deception. The hashtag-driven, emotive framing of the homepage is the kind of lure often used to draw traffic from social platforms. This report does not prove that the narrative content itself is the vehicle. Behavioural testing did not observe wallet-connection prompts, clipboard tampering, hidden forms, credential posts to third parties or cloaking, which means the harm mechanism behind the detections was not reproduced in the sandbox. The detections remain decisive, however, because the site might serve different content to other visitors or at other times. No conflicting legal identities and no brand impersonation were identified. Evidence:

• Reputation sources: eight engines flag the domain as malicious and three as suspicious, including three major security vendors, and the domain also appears in a phishing-associated record.
• Provenance: the domain was registered on 2026-07-27 (about 0.25 years old), with a single archive snapshot dated 2026-07-31 (one year tracked, no continuity of history).
• Sandbox behaviour on the homepage: three successful runs with no external requests, wallet interaction, clipboard writes or external credential forms.

Regulatory Verification Notes

The captured homepage presents no identifiable licence, registration number, operating company or regulator affiliation, and its on-page disclosure state is unclear. For a narrative or advocacy site this is not unusual in itself, and it is not evidence of a scam on its own. Here it adds to the picture because the operator has also not been connected to any real-world person or organisation by independent means. Registration data is incomplete on the owner side, which reflects ownership opacity rather than an identity contradiction. No third-party broker or regulatory record corresponds to this domain, so no external reputational context exists to offset the adverse threat-intelligence findings. Evidence:

• Registrar: the domain was registered through NICENIC International Group Co., Limited, with registration valid to 2027-07-27 and owner details incomplete.
• Transport security: the site presents a domain-validated TLS certificate issued by WE1, valid to 2026-12-24 (about 55 days remaining). This confirms encryption only and says nothing about the operator's legitimacy.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).
• Homepage: no licence, company name or regulatory reference appears in the captured content.

What to Verify Next

Any engagement should first re-check the domain's current standing with the major reputation services, because detections can be cleared or added quickly on a young domain. The identity behind the "Joby Weeks" story should be confirmed through an independent, offline route, such as an established social-media account or news outlet that is already known to be genuine and that links to this domain. The domain should never be reached through a shortened or forwarded link. Official contact channels should be confirmed independently. If an organisation is claimed to be behind the campaign, its existence should be checked against the relevant corporate or non-profit registry. Evidence:

• The homepage title and hashtag identify a narrative but no accountable operator.
• The domain's reputation record is adverse and is based on multiple engines, so its status should be re-checked before any sensitive action.
• The domain's recent creation means that neither track record nor third-party corroboration is available.

Summary Verdict

The overall posture is critical and clearly cautionary. Confirmed adverse reputation findings, together with a very young and unestablished domain, outweigh the benign behaviour seen in sandbox testing and the technically sound transport setup. The site's real-world operator remains unverified, and the evidence does not support treating the site as trustworthy for anything beyond passive viewing.

Infrastructure Integrity

The domain resolves entirely to Cloudflare's edge network in the United States, with no origin server visible. This is a mitigating factor only. It shows that the site sits behind mainstream protective infrastructure, but it does not offset the adverse reputation findings. It also prevents independent verification of where the content is actually hosted, and it can make rapid content changes harder to detect.

Closing Assessment

Treat the site as suitable for, at most, cautious read-only viewing from a hardened or isolated browser. Do not sign in, enter credentials, make payments, connect a wallet or download files from it. Anyone who reached it through an unsolicited message or social post should report that source and leave the page.