Verdict
photosgalerie.fr shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A minimal French-language login page (Email, Mot de passe, Connexion, Mot de passe oublié ?) with no other context or service description. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 7.8 years oldRegistered history | Clear |
| Web archive | Archived since 2007Public history exists | Clear |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2007.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
photosgalerie.fr presents a minimal French-language authentication interface titled “Photosgalerie,” with fields for email and password, a connection control, and a password-reset option. No service description, public business model, or visitor-facing context is visible, so its apparent purpose is restricted to requesting credentials through an administrative login page.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. Its login-only design requests credentials without explaining the service, operator, or reason for access, creating a substantial provenance gap for a high-stakes interaction. External reputation checks recorded the domain as blacklisted and identified two malicious detections; these signals materially outweigh the absence of suspicious external network activity during the observed session. The assessment does not establish a named brand impersonation, but the combination of a credential-only page and confirmed external threat detections warrants treating the login function as untrusted.
- The login page at the administrative authentication path displays only “Email,” “Mot de passe,” “Connexion,” and “Mot de passe oublié ?”
- The page contains one sensitive login form with a password field and no contextual service description.
- External reputation telemetry recorded a confirmed blacklist and 2 malicious detections, while Google Safe Browsing did not report a malicious result.
- WHOIS records show registration on 2018-11-08, approximately 7.78 years ago, through GANDI; archival telemetry records 34 snapshots spanning 2007-10-12 to 2025-10-11, covering 19 years.
Regulatory Verification Notes
The public page does not identify a legal entity, regulated operator, licensing authority, or license number, leaving the site’s governance and regulatory status unverified. This is a material transparency gap because the only visible interaction is credential submission, yet the site provides no public explanation of the service or accountable business entity. A valid transport certificate and established registration infrastructure are technical facts, not evidence that the operator is licensed or that the login service is legitimate. The available identity evidence is therefore insufficient to connect the site independently to a real-world organization.
- The public login page contains no visible company name, legal notice, licensing statement, or registration number.
- The site is hosted on AS12876, Scaleway SAS, France.
- TLS is provided by YR1 at DV validation level and is valid to 2026-11-07.
- The domain’s registrar is GANDI, with a recorded expiration date of 2027-05-15.
What to Verify Next
Before any sensitive interaction, the login address should be independently confirmed through an official, offline-established channel associated with the purported service or organization. Any claimed operator should be matched to the relevant corporate and regulatory registries, and the organization should confirm that this exact authentication endpoint is authorized. Credentials used elsewhere should not be submitted to the page; if exposure has already occurred, affected credentials should be changed through the verified service and protected with multifactor authentication.
- The authentication page provides no independent service context from which its provenance can be established.
- The page exposes a password-reset function despite providing no public operator or support identity.
- The observed page has no internal or external links supplying legal, service, or ownership context.
Summary Verdict
The overall posture is critical and unsuitable for sensitive interaction. The available evidence supports treating the site as an unverified credential-collection endpoint with confirmed adverse external reputation, rather than as an established service suitable for account access or financial activity.
Infrastructure Integrity
The site has no detected CDN or WAF, and resolution identified two likely origin addresses with no edge IPs. The hosting infrastructure is therefore directly exposed rather than materially shielded by mainstream edge protection; this is a mitigating limitation, not proof of malicious operation.
Closing Assessment
Access should be limited to non-sensitive observation while provenance is independently established; credentials, account authentication, and financial activity should not be performed through this endpoint.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, page content, analysis engine.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE - The page presents a sign-in form, and the operator behind it could not be independently verified.Page content
rule:PAGE_TYPE_LOGIN_UNVERIFIED
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - A sign-in path on this site handles sensitive information.Page content
rule:PAGE_LOGIN_PATH_SENSITIVE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of photosgalerie.fr.
- The request stayed on photosgalerie.fr. It was not redirected to another domain. Clear
- Registration is published under GANDI. Clear
- DNS for this domain is served by gandi.net, across 3 name servers. Noted
- The registration is paid up to 2027-05-15. Noted
- The earliest public archive of this site is from 2007-10-12. Clear
- It is hosted on AS12876, from a server in FR. Noted
Domain intelligence
| Registrar | GANDI |
|---|---|
| Hosting | AS12876 - Scaleway SAS, FR |
| Country | FR |
| Server IP | 195.154.100.66 |
| Name servers | ns-101-b.gandi.net, ns-136-a.gandi.net, ns-176-c.gandi.net |
| SSL issuer | YR1 |
| SSL expiry | 2026-11-07 |
| Domain age | 7.78 years (continuous registration) |
| Domain expiry | 2027-05-15 |
| Archive first seen | 2007-10-12 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about photosgalerie.fr at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.