Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
pump-voting-69.netlify.app is low-trust and potentially risky.
| What this site appears to be | A Netlify 'Site not found' 404 page indicating the requested path or site does not exist on Netlify. The page contains no service description, offer, form, or links. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website is a single "Site not found" error page served from a subdomain on a shared static-hosting platform. It shows only the platform's default message that the requested address does not exist, plus a generic invitation to build and deploy a site. It offers no products, pricing, services, contact details or operator information, so no business model or purpose can be inferred from what a visitor sees.
Scam/Impersonation Risk
The picture is mixed but unfavourable. An external threat-intelligence check has produced a confirmed blacklist hit against the domain, which is the decisive contradiction behind the elevated risk assessment. The visible page is inert, yet automated browsing sessions repeatedly detected concealed form elements and password-type inputs. The page also underwent very large structural changes after interaction, far beyond what a static error screen should do. This behaviour does not match the page's apparent content and is consistent with content that is swapped in or revealed conditionally. The subdomain name is a lookalike of the hosting platform's own brand, which was a mild impersonation-style signal. However, no phishing verdict, conflicting legal identities or confirmed impersonation of a specific company were established. Two abuse reports against an address in the platform's shared edge network were discounted, because they apply to infrastructure used by many tenants and not to this site specifically. In summary, the blacklist hit and the concealed-form behaviour are the material concerns, and they are not offset by any legitimate content on the page. Evidence:
- Homepage: the only visible content is the platform's default 404 message, with no offer, forms, links or social presence.
- Homepage behaviour: concealed forms were detected in all three automated sessions, along with password-type inputs and 4,130 DOM mutations after interaction, none of which are visible on the rendered page.
- Third-party reputation: one engine rated the domain malicious and one rated it suspicious, which produced the blacklist hit. The shared-infrastructure abuse reports were discounted.
- Network behaviour: external requests were all to allow-listed destinations, with no wallet-connect, clipboard-hijack or fingerprinting activity observed.
Regulatory Verification Notes
The site presents no legal, identity or licensing information. It has no terms page, no about page, no named operator, and no registration or licence number. Because it is a subdomain of a shared hosting platform, the domain itself says nothing about who operates it, and the real-world operator remains unidentified. This is a disclosure gap and is not by itself evidence of wrongdoing. Here it matters because it is combined with the blacklist hit, so there is no governance information to counterbalance that finding. No third-party broker or regulatory-database record matched the site, so there is no external reputational context beyond the threat-intelligence result above. The transport encryption is valid, but the certificate is the hosting platform's own organisation-validated certificate. It confirms the platform's identity and not the operator's. Evidence:
- Homepage: no company name, licence, registration number, address or contact channel is displayed.
- Hosting infrastructure: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: the TLS certificate is OV-validated and issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19. It does not identify the site operator.
- Third-party broker dataset: no matching record.
What to Verify Next
Any interaction should wait until the operator is independently identified, since nothing on the site identifies one. Confirm through the original referrer, such as the message, advertisement or social account that supplied the link, that the address was intentionally published, and cross-check it against the project's official channels. If a legitimate project is claimed, its official website should be reached independently, not through this address, and should be checked to see whether it references this subdomain. Any claim of licensing or registration should be confirmed directly with the relevant registry. Where concealed form behaviour is a concern, the site operator or the hosting platform's abuse desk can be asked to explain the hidden inputs. Evidence:
- Homepage: no operator, project or ownership statement exists to cross-reference.
- Homepage behaviour: concealed form elements recurred across all automated sessions, so they need an explanation from the operator.
- Hosting infrastructure: the site runs on a shared platform that provides an abuse-reporting route.
Summary Verdict
The site carries an elevated risk posture. A confirmed blacklist hit is combined with concealed-form and page-mutation behaviour that is inconsistent with the visible error page, and no operator identity or legitimate service content offsets these findings. Valid encryption and reputable hosting are mitigating factors only and do not establish legitimacy. Read-only viewing is the only use consistent with this assessment.
Infrastructure Integrity
All observed addresses are edge nodes of a major cloud provider's CDN/WAF, and the origin server was not observable. The platform's certificate is valid and issued by a recognised authority. This protective layer is a mitigating factor for transport security and availability. It cannot offset the reputational findings and does not prove that the operator behind the content is legitimate.
Closing Assessment
Account logins, credential entry, wallet connections and any financial interaction should be avoided on this site. Viewing without interaction is the only appropriate use until a reliable operator identity is established and the blacklist status is resolved.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
03 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pump-voting-69.netlify.app.
- The request stayed on pump-voting-69.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pump-voting-69.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.