Is openseptembertrendingscore.netlify.app safe? TrustSniffer's low-trust assessment: 35/100

Overview

This website is a subdomain hosted on a public static-site publishing platform. Its name suggests a "trending score" style page, but the captured homepage shows no identifiable products, services, operator or business model. Its apparent purpose cannot be established from the site itself.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The domain is blacklisted: several independent threat-intelligence sources currently flag it as malicious or suspicious, and the aggregated reputation check treats the listing as a strong, confirmed hit. This is the decisive factor in the cautionary posture. No brand impersonation, conflicting legal identities or phishing page content were observed in the captured material. The risk therefore comes from the external reputation listing and not from on-page deception. Two abuse reports also exist against an address on the shared cloud edge network serving the site. They apply to infrastructure used by many unrelated tenants, carry no confidence weighting and are discounted, so they should not be read as site-specific evidence. The listing itself is not discounted. The domain is very new and has almost no historical footprint, so there is no record of benign operation to offset the detections. The page was fully reachable and showed no external data exfiltration, wallet-connection prompts, hidden forms or clipboard manipulation during sandbox interaction. These observations reduce the likelihood of an active drive-by attack, but they do not cancel the blacklist. Evidence:

• Homepage and domain reputation: the domain is currently flagged by multiple threat-intelligence sources, two malicious and one suspicious.
• Domain registration: registered in 2026, roughly 40 days old (about 0.11 years).
• Web archive: 1 snapshot, first and last seen on 2026-09-11 (1 year tracked).
• Homepage behavioural sandbox: 3 of 3 runs succeeded, with no external requests, no hidden forms and no wallet or clipboard activity.

Regulatory Verification Notes

The captured pages disclose no operating company, registration number, licence or regulator, and the real-world operator cannot be independently linked to the site. This is a verification and transparency gap, not proof of wrongdoing. The absence of regulatory status matters more here because the domain is blacklisted and has no track record. No third-party broker or regulatory-database entry matched the site, so there is no reputational signal from that source in either direction. The transport-encryption certificate is valid and organisation-validated, but it names the hosting platform's operator rather than any independent business. It shows the platform's own certificate controls and does not identify who runs the content. Evidence:

• Legal and identity pages: no company name, licence, registration number or regulatory reference is visible on the captured homepage.
• Hosting infrastructure: served from AS16509 (Amazon, US).
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject Netlify, Inc, valid to 2027-03-19.

What to Verify Next

The operator should be identified through an independent route before any engagement. Anyone who was directed to this address should confirm with the referring party, through a channel known to be genuine, that the link is legitimate and intended. Any claim of a business, product or service associated with the site should be checked against the relevant company registry and, if financial activity is implied, the licensing authority's public register. The official support and contact channels should be confirmed independently, not through the site. If the site is found to belong to a known organisation, that organisation should be asked whether the domain is theirs and whether it has been compromised or misused. Evidence:

• Domain registration: the domain has existed for only a few weeks, so no long-standing ownership record can corroborate any identity claim.
• Homepage: no named operator or verifiable contact route is presented.
• Domain reputation: the standing threat listing should be rechecked with the listing sources before any reassessment.

Summary Verdict

The site presents an elevated-risk, cautionary posture. A confirmed external blacklisting combined with a brand-new, thinly documented domain outweighs its technically sound delivery and quiet behaviour. Nothing independent connects the site to a verifiable operator, so no legitimacy can be inferred.

Infrastructure Integrity

The site is delivered through a major cloud provider's CDN/WAF layer and all observed addresses are shared edge servers. The origin server was not observable, which limits independent hosting verification. Such platforms also allow content to be swapped quickly without any visible change to the address. The valid certificate and protected delivery are mitigating factors only. They cannot offset the reputation risk and do not show the content is benign.

Closing Assessment

The site should be treated as read-only at most. Account login, credential entry, personal data submission and any payment or financial interaction should be avoided, and nothing should be downloaded from it, until the operator is independently identified and the threat listing has cleared.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.