Verdict
new.drupal.org appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | GPT summary status=degraded | GPT summary call failed: HTTP error from GPT: 429 Too Many Requests { "error": { "message": "You exceeded your current quota, please check your plan and billing details. For more information on this error, read the docs: https://platform.openai.com/docs/guides/error-codes/api-errors.", "type": "insufficient_quota", "param": null, "code": "insufficient_quota" } } |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 25 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by GlobalSign Atlas R3 DV TLS CA 2025 Q4 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is the Drupal.org content site for Drupal, presenting Drupal as an open-source content management system for digital innovation and apparently serving an informational, community, and project-related purpose rather than presenting a regulated financial service.
Scam/Impersonation Risk
No scam, phishing, impersonation, or conflicting-identity contradictions were observed in the supplied evidence. The site’s homepage behavior was assessed as benign: no hidden forms, externally submitted password forms, wallet-provider activity, wallet-drainer behavior, clipboard hijacking, or cloaking was detected. The external reputation evidence was also clean, with no malicious or suspicious detections, no blacklist result, and no abuse reports associated with the observed delivery infrastructure. The available evidence therefore supports an established, apparently legitimate website, although it does not independently verify the real-world operator identity.
- The homepage behavior showed 0 wallet-connect runs, 0 wallet-sensitive runs, 0 wallet-drainer runs, 0 hidden forms, and 0 password forms submitted externally.
- The homepage behavior was classified as having no cloaking, no suspicious inline scripts, and no clipboard-write activity.
- External reputation checks recorded 0 malicious detections, 0 suspicious detections, 0 abuse reports, and no blacklist result.
Regulatory Verification Notes
The site presents an open-source software and information model, and the supplied material does not evidence a regulated financial offering requiring licensing. No independently verified legal-entity attribution or regulatory registration is established in the available evidence; this is an identity and disclosure point rather than evidence of a scam. Any separate paid, hosted, consulting, or other commercial service associated with the site should be assessed against the legal entity and regulatory requirements applicable to that service. A long-established domain, reputable registrar, valid transport encryption, and clean reputation materially support the site’s apparent legitimacy.
- The domain was registered in 2001 and is approximately 25.31 years old; registration is through NetEarth One Inc. d/b/a NetEarth.
- The site is served from AS54113, FASTLY - Fastly, Inc., US.
- The site uses a valid DV TLS certificate issued by GlobalSign Atlas R3 DV TLS CA 2025 Q4, valid through 2027-02-18.
- The homepage identifies the service as “Drupal.org | The Open Source CMS for Digital Innovation.”
What to Verify Next
Before credential or payment interactions, independently confirm that the intended service is operated by the organization associated with the official Drupal project and review the applicable terms, privacy information, and payment protections. If a separate commercial service makes regulated claims, confirm its licensing directly with the relevant regulator rather than relying solely on on-site statements. Official support and contact channels should also be confirmed through an independent, trusted route.
- The available identity-verification status remains unknown, so operator attribution is not independently established.
- The supplied homepage evidence presents a software and information service rather than a clearly identified regulated financial product.
- No third-party broker or regulatory match was recorded for the assessed domain.
Summary Verdict
The overall posture is high trust and low risk. Available evidence is consistent with an established, apparently legitimate website, while independent verification of the real-world operator identity remains incomplete. No contradictory scam or impersonation signals were identified.
Infrastructure Integrity
The site is delivered through mainstream edge-network infrastructure, which is a mitigating control for direct exposure and service resilience. This infrastructure supports the site’s technical integrity but is not, by itself, proof of operator legitimacy.
- The observed hosting usage type is classified as Content Delivery Network.
- The observed service resolved through a US-based Fastly delivery environment.
Closing Assessment
Ordinary browsing is proportionate to the assessed posture; before submitting credentials or payment information, standard independent checks of merchant identity, applicable terms, and payment protection should be completed.
Written analysis generated 2026-08-11 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of new.drupal.org.
- The request stayed on new.drupal.org. It was not redirected to another domain. Clear
- Registration is published under NetEarth One Inc. d/b/a NetEarth. Clear
- DNS for this domain is served by dnsmadeeasy.com, across 5 name servers. Noted
- The registration is paid up to 2028-04-26. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | NetEarth One Inc. d/b/a NetEarth |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 199.232.174.217 |
| Name servers | ns0.dnsmadeeasy.com, ns1.dnsmadeeasy.com, ns2.dnsmadeeasy.com, ns3.dnsmadeeasy.com, ns4.dnsmadeeasy.com |
| SSL issuer | GlobalSign Atlas R3 DV TLS CA 2025 Q4 |
| SSL expiry | 2027-02-18 |
| Domain age | 25.31 years (continuous registration) |
| Domain expiry | 2028-04-26 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about new.drupal.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.