Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
oakwavemar.top shows high-risk / scam indicators.
| What this site appears to be | Cryptocurrency exchange-style page (labelled SYGNUM) encouraging registration, KYC and deposits to trade spot/futures and buy financial products. The page includes specific return percentages and promotional language about high historical returns but lacks verifiable audit/regulatory evidence in the captured content. Suitable for further human review before trusting for deposits. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 7 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as “SYGNUM,” a cryptocurrency exchange and custody platform offering account registration, identity verification, crypto and fiat deposits, spot and futures trading, and related financial products intended to generate returns.
Scam/Impersonation Risk
Confirmed contradictions make this a critical-risk site for sensitive interaction. External threat intelligence records a confirmed blacklist hit, with malicious detections from multiple security providers, while the page itself requests registration, KYC completion, deposits, and login activity before trading services can be used. The captured content promotes return-oriented financial products and high historical returns without corresponding audit or regulatory evidence, and its deposit-before-service model, guaranteed-return language, claim-evidence disparity, and unclear value flow materially increase the risk of credential or financial harm. No separate brand-impersonation finding or conflicting legal-entity identity was observed, but those absences do not offset the confirmed malicious-reputation contradiction.
- The homepage presents SYGNUM as an exchange requiring account creation, identity authentication, deposits, and trading access.
- The homepage contains the documented indicators “deposit before service,” “guaranteed return,” “claim evidence dissonance,” and “opaque value flow.”
- External reputation assessment records 7 malicious detections and a confirmed blacklist status, with Fortinet and Kaspersky among the flagged providers.
- Domain registration telemetry records creation on 2026-10-08, with an age of 0.03 years.
Regulatory Verification Notes
The captured site content does not provide verifiable audit or regulatory evidence for the exchange, custody, trading, or return-oriented products. The operator’s real-world identity remains unverified, and the available disclosure state is insufficient to establish who is responsible for customer assets or financial claims. This is a substantive verification gap in addition to the security contradiction; it should not be treated as proof of fraud independently, but it prevents the site from being treated as an established regulated service. The available broker-reputation dataset did not produce a match, which is only a limited contextual signal and does not establish licensing or legitimacy.
- The homepage identifies the service as SYGNUM but does not show a verifiable licensing authority or license number in the captured content.
- Archive telemetry records 2 snapshots spanning 1 year, from 2026-10-08 to 2026-10-09.
- Hosting telemetry identifies AS13335, CLOUDFLARENET—Cloudflare, Inc., US.
- The site uses a DV TLS certificate issued by WE1, valid through 2027-01-06.
What to Verify Next
Before any interaction, an independent check should confirm the operator’s legal name, jurisdiction, licensing status, custody arrangements, withdrawal controls, and dispute-resolution process through the relevant financial regulator or corporate registry rather than through links supplied by the site. Any previously submitted credentials should be changed from a trusted device, with multifactor authentication enabled where available; any suspected payment or wallet exposure should be escalated promptly to the relevant provider. Official support and contact channels should be confirmed through an independent route before further communication.
- The registration and login workflow includes a sensitive form and requests financial action.
- The site’s own onboarding sequence instructs visitors to create an account, fund it, and then begin trading.
- The captured content does not provide audit or regulatory evidence supporting its return-oriented claims.
- Browser analysis recorded requests for sensitive input and a financial action requirement.
Summary Verdict
The site has a critical trust posture and should be treated as unsuitable for sensitive interaction. The convergence of confirmed malicious-reputation findings, deposit-oriented financial mechanics, unsupported return claims, and unverified operator identity outweighs the ordinary technical indicators of a functioning website.
Infrastructure Integrity
Cloudflare CDN/WAF protection is present, and all observed addresses were Cloudflare edge infrastructure on AS13335; the origin server was not observable. This reduces direct exposure of the underlying host but is only a mitigating infrastructure characteristic and does not validate the operator or the site’s financial claims.
Closing Assessment
The site should not be used for login, credential submission, deposits, trading, or other financial activity; engagement should be suspended unless independent regulatory, corporate, and security checks decisively resolve the identified concerns.
Written analysis generated 2026-10-18 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, several checks together, hosting and network.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
04 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of oakwavemar.top.
- The request stayed on oakwavemar.top. It was not redirected to another domain. Clear
- Registration is published under NameMart Pte. Ltd.. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-08. Noted
- The earliest public archive of this site is from 2026-10-08. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NameMart Pte. Ltd. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::ac43:8cb2 |
| Name servers | jonah.ns.cloudflare.com, suzanne.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-06 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | 2027-10-08 |
| Archive first seen | 2026-10-08 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 7 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about oakwavemar.top at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.