Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
robinhood-main-dex-pst.netlify.app is low-trust and potentially risky.
| What this site appears to be | The captured page is Netlify's default 'Site not found' 404 response, indicating the requested path or site does not exist on Netlify. It contains no service description, login form, or commercial content, so the site's purpose and trustworthiness cannot be determined. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 7 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 2 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 202615 snapshots | Clear |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a subdomain on Netlify's free hosting platform. Its name combines a well-known retail brokerage name with "dex", which suggests a decentralized-exchange or trading front end. The captured homepage is only Netlify's stock "Site not found" error page, which says the link is broken or the site is unpublished. It shows no products, pricing, branding, operator, contact details or commercial content, so no business model can be established from what is visible.
Scam/Impersonation Risk
Contradictory signals are present, and they point to elevated risk. Several independent security engines currently flag the domain as malicious, including a major security vendor. This amounts to a confirmed blacklist listing and is the decisive reason for the cautionary posture. The domain name also borrows a recognizable brokerage brand and pairs it with trading terminology on a free, shared hosting subdomain. That construction is a common lookalike pattern, although the visible page makes no explicit claim to be that brand and no operator link to it was established. Behavioral testing adds an anomaly. The visible page is a bare error screen with no form, yet three consecutive sandbox runs detected hidden forms, each including a password field. The page also produced very large structural changes after interaction and a heavy volume of external requests and POSTs, although none went to non-whitelisted destinations. Hidden credential-capable forms behind a decoy error page are consistent with a staged credential-harvesting setup. This is an inference from behavior, since no live phishing content was captured. Two abuse reports exist against an address in the shared cloud infrastructure range serving the site. They apply to the provider's shared network and carry no weight against this specific site. No conflicting legal identities were observed.
- Homepage: the captured content is Netlify's default 404 page, with no operator, product or contact information.
- Sandbox behavior on the homepage: three of three runs detected hidden forms with password fields, and about 4,100 DOM mutations followed interaction.
- Domain registered in 2026 (~23 days old); 15 archive snapshots, all within 2026 (1 year tracked, first and last seen 2026-09-27).
- Reputation checks: seven security engines flag the domain as malicious, and a major vendor is among them.
Regulatory Verification Notes
Nothing observable on the captured page identifies a legal entity, licensed activity, registration number or governing jurisdiction. This is a verification gap only, because the page is a platform error screen and not a corporate site. The operator's identity remains unverified, and the age of the domain offers no corporate track record. No broker or regulatory-database match was found, and no regulated status was established. Any suggestion that this site is connected to a licensed brokerage or exchange rests solely on its domain name and is unsupported. The reputational findings above are third-party detections and not a regulatory ruling.
- Homepage: no company name, licence, legal pages or jurisdiction appear anywhere in the captured content.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Transport encryption: the TLS certificate is OV-validated and issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, valid to 2027-03-19. It authenticates the hosting platform and says nothing about the site's operator.
What to Verify Next
The affiliated brand's official channels should confirm whether this address belongs to it, using an independently obtained official address and not any link, message or referral that led here. Anyone who received this address by message, advertisement or social post should treat that source as suspect and report it to the brand and to the hosting platform's abuse team. The domain should be re-assessed only if it later serves real content with an identifiable operator and a verifiable licence in the relevant registry, and only if the current security detections have been cleared.
- Homepage: the page offers no official contact route, so none can be verified from the site itself.
- Domain name: it embeds a brokerage brand and trading terms on a free hosting subdomain.
- Reputation: active malicious detections remain current at the time of analysis.
Summary Verdict
The site carries an elevated risk posture. Current external threat detections, hidden credential-capable forms behind a blank decoy page, a brand-referencing name and an unverified operator converge. Technical hygiene on the hosting platform does not offset these signals, and the evidence supports a clearly cautionary assessment.
Infrastructure Integrity
The site is served from Amazon's cloud network behind the hosting platform's edge layer. All four observed addresses are edge nodes, and no origin server could be observed. A valid certificate and mainstream hosting are mitigating factors only. They establish that the platform is reputable, not that the content or operator is. Free, ephemeral subdomains of this kind can be repointed or swapped quickly, so the infrastructure does not constrain what the site might serve later.
Closing Assessment
At most, the address should be viewed passively. It should not be used for logins, credential entry, wallet connections or any payment or financial action.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, page content.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- The page contained a form a visitor cannot see.Behaviour in a sandbox
rule:BEHAV_HIDDEN_FORMS
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page appears to present itself as a known brand it is not verified to belong to.Page content
rule:PAGE_BRAND_SUSPECTED
Signals weighed against the site
- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of robinhood-main-dex-pst.netlify.app.
- The request stayed on robinhood-main-dex-pst.netlify.app. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2026-09-27. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-09-27 |
| Archive snapshots | 15 |
| Reputation | VirusTotal: 7 flagged | AbuseIPDB: 0% confidence, 2 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about robinhood-main-dex-pst.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.