Verdict
pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev is moderately trusted.
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
| What this site appears to be | A 404/Object not found error page indicating the requested object is not publicly accessible. No actionable forms, links, or monetization present. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 8 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is an object-storage-hosted endpoint that presents a “Not Found” response stating that the requested object does not exist or is not publicly accessible. It exposes no functioning business interface, product offering, account workflow, or monetization mechanism, so its intended commercial purpose cannot be established from the accessible content.
Scam/Impersonation Risk
The site presents a material external-reputation contradiction: multiple security services classified the domain as malicious, and the domain is listed on external blacklists. This is inconsistent with treating the endpoint as suitable for sensitive interaction, even though the accessible page itself contains no login form, credential request, payment flow, or brand-impersonation content. The available evidence does not establish a conflicting legal identity or direct brand impersonation, but the external detections warrant a clearly cautionary posture.
- The homepage returns an object-storage 404 response and contains no forms, credentials request, payment mechanism, or monetization.
- External scanning recorded 8 malicious detections from 13 evaluated detections, with Fortinet, Kaspersky, and Sophos among the flagged vendors.
- The domain is recorded as present on an external blacklist; Google Safe Browsing did not report a malicious result.
- A single abuse report concerns a Cloudflare shared-infrastructure IP and is explicitly discounted because it applies to shared provider infrastructure.
Regulatory Verification Notes
The accessible content provides no operator identity, licensing statement, registration number, governing entity, or usable legal documentation. This is a significant disclosure gap for any service that might later request credentials, funds, or regulated financial activity, but the absence of a disclosure on an inaccessible error page is a verification issue rather than standalone proof of fraud. No matching third-party broker profile was identified. The site’s transport security is technically present, but domain validation does not establish the legal identity or authorization of an operator.
- The accessible homepage contains only the 404/object-not-found message and no legal, licensing, or corporate disclosure.
- Hosted on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
- TLS certificate issued by YE1 (DV), valid to 2026-12-06.
- No matching third-party broker record was identified.
What to Verify Next
Before any credential submission, account creation, payment, or financial interaction, an independent source should confirm the operator’s legal name, official domain, regulatory authorization, and support channels. Any claimed license should be checked directly against the relevant regulator’s public register, and the domain should be re-evaluated only after a functioning service and complete legal documentation are available.
- The homepage currently provides no operator, licensing, or support documentation against which those claims can be validated.
- The accessible page contains no active account, payment, or credential workflow to support a legitimate-service assessment.
- The external-reputation contradiction requires independent confirmation of the domain’s ownership and intended use before sensitive interaction.
Summary Verdict
The website has a moderate trust posture with elevated sensitive-interaction risk. Its legitimacy and real-world operator remain unverified, while external malicious detections and blacklist presence prevent a positive trust determination.
Infrastructure Integrity
Cloudflare CDN/WAF protection provides a mitigating layer, and all observed addresses resolve to Cloudflare edge infrastructure rather than an independently observable origin server. This supports transport and edge resilience but does not validate the site’s operator, content, or business purpose.
- Four observed edge addresses were associated with AS13335; likely origin IP count was 0.
- CDN/WAF provider: Cloudflare, Inc.; registry: ARIN; hosting country: US.
- Observed edge IPs: 104.18.50.34, 104.18.54.45, 2606:4700:311b::6812:3222, and 2606:4700:311b::6812:362d.
Closing Assessment
The appropriate posture is to restrict activity to passive observation until the operator, authorization, and intended service are independently established through trusted channels.
Written analysis generated 2026-09-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 2606:4700:311b::6812:3222 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev.
- The request stayed on pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:311b::6812:3222 |
| Name servers | Not available |
| SSL issuer | YE1 |
| SSL expiry | 2026-12-06 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 8 flagged | AbuseIPDB: 0% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pub-1c4ef2a315ec4b89b9dfad9472afee69.r2.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.