Is robinhood-main-dex-uvm.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a hostname on Netlify's free hosting platform. The name combines a well-known retail brokerage brand with "main" and "dex", which suggests a decentralized trading front end. The visitor-facing content seen at analysis time was only a generic hosting-provider "Site not found" 404 notice, with no products, branding, contact details or policies. Its apparent purpose is therefore unclear: the page is either a placeholder or a deployment that was removed or swapped out. The finance-themed name would still be expected to attract users looking for a trading or wallet service.

Scam/Impersonation Risk

Elevated, and the contradictions are confirmed rather than inferred. The site is blacklisted: a major browser-protection service classifies it under its social-engineering (deceptive or phishing-style) category, and several independent security engines, including two tier-one vendors, rate it malicious. These external detections, not the sparse page content, drive the cautionary posture. The hostname embeds a recognised financial brand and a "dex" label on a free shared-hosting subdomain. That is a common pattern for lookalike trading and wallet-connection lures, although no brand-impersonation or conflicting-identity finding was confirmed in the on-page content. The visible page contradicts what the sandbox observed. The 404 notice shows no forms, yet every sandbox run recorded concealed forms, password-type inputs, very heavy page restructuring after interaction, and almost all network traffic going to third-party destinations. That behaviour is consistent with content being swapped in or loaded dynamically after the placeholder renders, and it makes the benign appearance of the visible page unreliable. A pair of abuse reports exists against an address in the hosting provider's shared range. They are attributed to shared infrastructure and discounted, so they are not counted against the site. No conflicting legal-entity names were found, because the site discloses none. Evidence:

• Homepage: renders only a Netlify "Site not found" 404 notice, with no products, forms, branding or contact information.
• Sandbox behaviour across 3 of 3 runs: hidden forms detected, 3 password-type form fields, and a maximum of 4,130 page changes after interaction. About 99.6% of network traffic went to external destinations.
• Reputation: browser-protection match for social engineering. 6 security engines flagged the site malicious, including 2 tier-one vendors.
• Hostname: embeds a well-known brokerage brand name together with "dex" on a free shared-hosting subdomain.

Regulatory Verification Notes

The site presents no legal, licensing or corporate-registration information. The only page captured is a hosting error notice, and no terms, privacy policy, about page or regulator reference was published. The operator's real-world identity is unverified, and ownership and governance are opaque. This opacity is an administrative and transparency limitation. It is not an identity contradiction, but with the reputation findings above it removes any independent basis for treating the site as a legitimate financial service. No third-party broker-review record matched this site, and none of the evidence supports an assumption that it is regulated. A finance-branded hostname would normally be expected to show regulatory standing, and none can be established. Evidence:

• Homepage: contains no company name, licence or registration number, or policy pages.
• Transport encryption: the OV certificate names the hosting platform, not an independent operator, as the subject organisation. It was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 and is valid to 2027-03-19, so it adds nothing about the site's own identity.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• No external broker or regulator record matched the site.

What to Verify Next

Any contact with this hostname should be preceded by independent confirmation of whether the genuine brand operates a decentralized-exchange product at all. That check should use the brand's officially published channels, reached through a bookmarked or manually typed address and not through any link that led here. Wallet-connection, sign-in or seed-phrase prompts that appear at this address should be treated as unconfirmed until the brand itself confirms the address. Security teams should also check whether the address is circulating in messages, adverts or social posts, and report it to the hosting platform's abuse desk and to the brand's security team. Any claimed licence or registration should be checked directly with the relevant regulator's register. The site currently makes no such claim. Evidence:

• Hostname: a brand-plus-"dex" name on a free-hosting subdomain gives no verifiable link to the named brand.
• Homepage: shows no official links, contact channels or regulatory references to cross-check.
• Reputation: external detections remain active and should be re-checked before any change in posture.

Summary Verdict

The site carries a critical trust posture. Confirmed external threat detections, together with concealed-form behaviour that contradicts a blank placeholder page, outweigh the valid certificate and unremarkable hosting. Legitimacy cannot be inferred, and the operator identity is unverified. The site is unsuitable for any sensitive interaction.

Infrastructure Integrity

The site is delivered through Amazon's cloud and content-delivery edge, and all four observed addresses sit in that provider's network. Origin visibility is therefore limited, which makes it harder to verify independently what sits behind the edge. Protective infrastructure is a mitigating factor only. Here it cannot offset the confirmed reputation findings, and the shared-platform context means the hosting layer says nothing about who controls the content. Evidence:

• All 4 observed addresses (including 63.176.8.218) fall under AS16509, and none was identified as an origin address.
• The hosting platform's "Site not found" page shows the hostname has no live content that the platform recognises at the captured path.

Closing Assessment

Treat the address as unsafe for sign-in, credential entry, wallet connection and any financial activity. Passive viewing at most is acceptable, and nothing should be downloaded. Anyone who has already entered credentials or approved a wallet connection here should change the affected passwords and revoke the permissions immediately.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.