Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
robinhood-main-dex-fmt.netlify.app shows high-risk / scam indicators.
| What this site appears to be | Netlify-hosted 404 page indicating a missing site or broken link. Contains guidance to Netlify support and an internal build ID. No forms, offers, or monetization present. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a subdomain on a free, shared application-hosting platform. Its hostname pairs the name of a well-known retail brokerage with decentralized-exchange terminology. At analysis time the homepage served only the hosting platform's generic "Site not found" error page, which contains a troubleshooting link, an internal deployment identifier and a prompt to build a site on the platform. It shows no product, pricing, company description or visible form. Its apparent purpose is unclear, since it is either a dormant or removed deployment or a staging shell for a trading-themed front end.
Scam/Impersonation Risk
This site carries a confirmed external blacklisting. A substantial number of independent security engines, including two tier-one vendors, currently classify the domain as malicious. That corroborated detection is the decisive risk finding, and no protective infrastructure offsets it. The visible page is benign and content analysis found no brand impersonation or phishing copy. Even so, the hostname combines a recognizable brokerage name with exchange-style wording on a free subdomain that anyone can register. That is a common construction for credential-harvesting and wallet-draining front ends, and no relationship to the named brand has been established. Runtime behaviour contradicts the harmless-looking 404 page. In all three sandbox sessions the page created hidden forms containing password fields, and it rewrote thousands of page elements after interaction. Some sessions also showed almost all outbound traffic going to external destinations. A static error page has no legitimate reason to assemble concealed credential inputs. This pattern is consistent with a template that activates once content is deployed or a visitor interacts with it. A small number of abuse reports exist for a network address in the hosting provider's range. They relate to shared provider infrastructure rather than this site, so they were discounted and are not counted against it. No conflicting legal identities were found.
- Homepage: shows only the platform's "Site not found" template, with no forms, offers or monetization visible in static content.
- Behavioural sandbox: hidden forms detected in 3 of 3 runs, with password fields present in each; about 4,100 DOM mutations recorded after interaction.
- External reputation: a corroborated malicious classification across multiple major engines, including two tier-one vendors, with no clean-reputation counterweight.
- Web archive: only 2 snapshots over about 1 year tracked, so there is no meaningful operating history.
Regulatory Verification Notes
The site presents no legal, terms, privacy, about or contact pages. It claims no licence, registration number or regulator, and it names no operating company. Because the only reachable page is an error template, the absence of these disclosures is a verification gap, not evidence of misconduct. The trading-oriented hostname implies a financial service, which would normally require identifiable licensing. Any such claim therefore has no basis on this site. The site's real-world operator remains unverified. The transport certificate is issued to the hosting platform and not to any independent business entity, so it does not authenticate the site's operator. No third-party broker-reputation record matched this domain.
- Homepage: contains no company name, licence reference, regulator or jurisdiction.
- Site structure: no legal or policy pages were found, and no internal links were present.
- Transport security: organization-validated TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
What to Verify Next
Before any engagement, the first step is to confirm directly with the named brokerage, through its official website or support channel reached independently, that it does not operate or authorize this hostname. If the hostname reached a user through a message, advertisement or social post, the source should be treated as untrusted and reported. A report can be filed with the hosting platform's abuse channel and with the brand's fraud desk. If a regulated service is later asserted for this hostname, the claimed licence should be checked in the relevant regulator's public register. Official contact channels should be confirmed through an independent, offline route.
- Hostname: embeds a recognized brokerage name that no on-site content connects to a real operator.
- Homepage: names no operator, so no claim exists to check against a registry.
- External reputation: confirmed malicious classifications give any abuse report a concrete basis.
Summary Verdict
The assessment is an elevated-risk, clearly cautionary posture. The decisive factor is the confirmed external blacklisting. It is reinforced by concealed credential-form behaviour that the benign-looking page does not explain. Operator identity is unverified. The site should not be treated as a legitimate or trusted service for any sensitive purpose.
Infrastructure Integrity
The site is served through Amazon-operated hosting in the United States, with a CDN/WAF layer. The observed edge addresses belong to a second major network provider, and the origin server was not observable. This is mainstream, well-managed platform infrastructure and counts only as a mild mitigating factor. Free shared hosting is available to any registrant and says nothing about who operates this particular site. The protections cannot offset the confirmed threat detections.
Closing Assessment
Interaction should be limited to passive viewing at most. No credentials, payment details or wallet connections should be entered, nothing should be downloaded, and no instructions to log in or "verify" an account should be followed. Anyone seeking the named brokerage's services should type its official address manually or use its verified application.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page replaced a large part of its own content after loading.Behaviour in a sandbox
rule:BEHAV_DOM_CHANGE_HIGH - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on.Behaviour in a sandbox
rule:BEHAV_DOM_DIFF_AFTER_INTERACTION
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of robinhood-main-dex-fmt.netlify.app.
- The request stayed on robinhood-main-dex-fmt.netlify.app. It was not redirected to another domain. Clear
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | Not available |
| Country | Not available |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Lookup incomplete |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not available |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about robinhood-main-dex-fmt.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.