Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pump-voting-t7.netlify.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 1% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a Netlify-hosted web application whose address suggests a token-voting or "pump" community interface, though the page captured during analysis served only a generic "Site not found" notice with a small amount of text. A visitor is presented with no identifiable product, brand, operator or service description. The apparent purpose is therefore unclear, and the page's behavior does not match its minimal content.
Scam/Impersonation Risk
The assessment is cautionary. A third-party threat-intelligence reputation source currently lists the domain, and this is the one confirmed contradiction. It is blacklisted on external reputation evidence, with a malicious and a suspicious detection recorded across the engines consulted. No brand impersonation, conflicting legal identities or confirmed phishing page were observed. The behavioral findings add to the concern. In every automated session the page contained concealed forms, including password-entry fields that a visitor cannot see. It also generated an unusually large volume of dynamic page changes after interaction, and almost all of its network traffic went to external destinations. The "Site not found" page the site served is inconsistent with that activity, so the hidden form machinery has no visible purpose or explanation. Separately, a small number of abuse reports exist against one of the addresses serving the domain. That address belongs to shared cloud edge infrastructure, so those reports cannot be attributed to this site and are not treated as evidence against its operator. No contact address or support channel was published to assess.
- Homepage, automated sessions: hidden forms detected in 3 of 3 runs, with 3 password-type fields concealed from view.
- Homepage, post-interaction behavior: about 4,130 page mutations observed, and about 99.6% of network activity went to external hosts (36 external requests, 21 external POSTs).
- External reputation: 1 malicious and 1 suspicious detection from the threat-intelligence engines consulted.
- Hosting infrastructure: 4 abuse reports against a shared edge IP, with a very low confidence score and attributed to shared infrastructure.
Regulatory Verification Notes
The captured page carries no legal, terms, privacy, about or licensing content, so no operator, registered entity or regulatory status can be assessed from the site. Registration ownership details are incomplete, which is treated as ownership opacity. It is not an identity contradiction. The real-world operator has not been independently connected to any brand or person, so no legitimacy conclusion can be drawn. No broker-reputation record matches this domain. The valid transport encryption confirms only that the connection is encrypted, not who runs the site.
- Homepage: returned a "Site not found" notice with no corporate, licensing or contact disclosures.
- Transport encryption: OV certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19, which is the hosting platform's identity and not the site operator's.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
What to Verify Next
Before any interaction, confirm who operates the site through the platform or project it claims to belong to, using an official channel found independently of this address. Establish whether the domain is an authorized deployment or an unrelated or abandoned one. Any sign-in, wallet or payment request on it should be checked against the official project's published links instead of this address. Confirm whether the hidden password forms are known to the project that supposedly owns the site.
- Homepage: the "Site not found" notice conflicts with the active form and request behavior observed in testing.
- Naming: the domain's voting-themed name is a user-chosen subdomain on a shared hosting platform and is not tied to any named organization.
Summary Verdict
The site is high-risk and does not support trust. A confirmed external reputation listing is compounded by concealed credential-collection behavior and no verifiable operator identity. Technical hygiene such as valid encryption and mainstream hosting is outweighed by these factors.
Infrastructure Integrity
The site is delivered through Amazon Web Services edge infrastructure on a shared hosting platform, and all observed addresses are edge nodes. The origin server could not be observed. This protective, mainstream infrastructure is a mitigating factor only. It supports operational stability but cannot offset the reputation findings, and it limits independent verification of what is actually hosted.
Closing Assessment
Interaction should be limited to passive viewing at most. Credentials, wallet connections and any financial activity should be withheld, and the domain should be avoided until an independent source confirms its legitimacy and the listing is resolved.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pump-voting-t7.netlify.app.
- The request stayed on pump-voting-t7.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::258 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 1% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pump-voting-t7.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.