Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pump-voting-fd.netlify.app shows high-risk / scam indicators.
| What this site appears to be | Standard Netlify 'Site not found' 404 page indicating the requested path or site is not deployed. It contains no business content, forms, links, or claims to assess. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a subdomain on a shared hosting platform that currently serves only the platform's generic "Site not found" error page. The page carries no branding, products, contact details, legal pages or business content. Its name suggests a voting or participation service tied to a token-launch theme, but the page shows no purpose, offer or monetisation model.
Scam/Impersonation Risk
A confirmed blacklist listing from an external threat-reputation source applies to this site. A threat-intelligence aggregation flags the domain as malicious on one engine and suspicious on another, and a separate historical indicator associates it with phishing. This is the decisive risk factor. No conflicting legal identities and no confirmed brand impersonation were found, but the listing alone warrants a cautionary stance. Browser-sandbox testing of the homepage found concealed form elements in every run, including password-type fields. The visible page contains no form at all. The page content also changed heavily after interaction, far more than a static error page would produce. This gap between what a visitor sees and what executes in the page is characteristic of staged credential-collection pages awaiting activation. It is a behavioural warning, not proof of an active attack. The domain also resembles the hosting platform's own name closely enough to raise a lookalike heuristic, but no impersonation was confirmed. Two abuse reports exist against a network address used by the hosting provider. They concern shared infrastructure rather than this site specifically, so they carry no weight here. Network traffic was otherwise benign. No wallet-connection, clipboard-hijacking or fingerprinting behaviour was observed. Evidence:
- Homepage: external threat-reputation sources list the domain, with one malicious and one suspicious detection.
- Homepage sandbox runs: hidden forms were detected in 3 of 3 runs, including password-type fields, on a page that displays none.
- Homepage sandbox runs: 4,130 DOM mutations followed interaction, which is anomalous for a static error page.
- Shared hosting address: 2 abuse reports, attributed to shared provider infrastructure and discounted.
Regulatory Verification Notes
The site presents no legal, terms, privacy, about or licensing pages, so there is nothing to assess for regulatory status and no regulated-entity claim exists. The real-world operator is not independently verified. No broker-reputation entry matched the domain, which is neutral and not a verdict either way. The valid certificate names the hosting platform as its subject organisation, not the site operator. It therefore says nothing about who runs this site. It confirms only that transport encryption is in place. Evidence:
- Homepage: the page contains only the platform's error text, with no company name, address, licence or registration reference.
- Transport encryption: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
What to Verify Next
Before any engagement, confirm through an independent route who, if anyone, is meant to operate this subdomain. Obtain any link to it only from a verified official channel of a known organisation, not from messages, social posts or search ads. If an organisation claims it, ask that organisation to confirm in writing, through channels it publishes elsewhere, that this address is genuine. Security teams should treat the domain as untrusted in mail and web filters until the listing is resolved and re-scanning shows the hidden-form behaviour is gone. Evidence:
- Homepage: it exposes no operator identity or support route that could be checked.
- Sandbox behaviour: the hidden password-type forms need re-testing if the site is later populated with content.
- Reputation listing: it should be re-checked with the listing sources after any remediation.
Summary Verdict
The overall posture is high risk. Confirmed external listings and concealed credential-capable form behaviour outweigh the technically sound transport security and mainstream hosting. The operator remains unidentified, and the site offers no substantive content that could support legitimacy.
Infrastructure Integrity
The site sits behind AWS-based edge infrastructure on a shared hosting platform. All observed addresses are edge nodes, and the origin server is not observable, so hosting cannot be independently verified. This setup also makes it easy to swap content quickly. The mainstream provider and the valid certificate are mitigating factors only. They do not offset the external reputation findings.
Closing Assessment
Do not enter credentials, connect wallets, or make payments or other financial interactions on this site. Treat any link or message pointing to it as suspect, and report it to the platform provider and the organisation it may be imitating.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
03 Page content
- The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pump-voting-fd.netlify.app.
- The request stayed on pump-voting-fd.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pump-voting-fd.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.