Is sammygeemints082.github.io a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a user-level subdomain on a public code-hosting and static-site platform. When captured, its homepage returned a "Site not found" notice rather than any product, service, or business content. It presents no brand, offer, or storefront to a visitor, and no business model is evident. Its apparent function is a placeholder or abandoned project page, and it was assessed on its reputation and behaviour instead.

Scam/Impersonation Risk

Contradictory signals are present, and they drive a clearly cautionary assessment. Several independent security engines currently flag the domain as malicious, and two of them are top-tier vendors. This amounts to a confirmed blacklist listing, and it is the decisive factor in the assessment. The page content itself provided no usable evidence of the operator's identity, so no claim about who runs the site can be supported. The page is empty, so the detections cannot be tied to any visible lure, form, or product. The remaining risk therefore rests on external reputation and observed behaviour. During sandbox runs, the page produced outbound POST requests, including some to destinations outside the platform's expected services, and most of its network activity went to third-party hosts. For a page that displays only an error notice, that outbound pattern is out of proportion to its content. Abuse reports exist against the shared platform address it resolves to, but they apply to infrastructure used by many unrelated sites and are not evidence about this operator. No conflicting legal identities, brand impersonation, or wallet-drainer, clipboard-hijack, or credential-form behaviour was observed. Evidence:

• Homepage: the page title and body present a "site not found" notice, and the page returned a not-found status when captured.
• Reputation: 6 security engines rated the domain malicious and 1 suspicious, including two top-tier vendors.
• Behaviour: 3 of 6 outbound POST requests went to non-allow-listed destinations, and about 99% of the peak network activity was external.
• Shared address: 9 abuse reports exist against the shared platform IP, attributed to shared infrastructure rather than this site specifically.

Regulatory Verification Notes

The site publishes no legal, terms, privacy, or about pages, and nothing on the captured page names an operating entity, a licence, or a registration. Given the absence of any commercial offering, this is a content gap and not a finding of regulatory breach. Identity could not be independently connected to a real-world person or organisation. Legitimacy therefore cannot be established, and the technical hygiene below does not change that. Transport security is correctly configured, but a basic domain-validated certificate says nothing about who operates the site. No third-party broker or regulator profile matched this domain. Evidence:

• Homepage: no company name, licence number, or legal-entity reference appears on the captured page.
• Transport encryption: the TLS certificate is DV, issued by YR1, valid to 2026-12-29.
• Hosting network: served from AS54113 (Fastly, Inc., US).

What to Verify Next

Any contact with this domain should first be matched to a known, independently confirmed party. If someone supplied this address, the sender's identity and intent should be confirmed through an offline or previously trusted channel before any interaction. The detections should be re-checked on the current reputation sources, since a compromised page can be cleaned and delisted. Content downloaded from this domain should be treated as untrusted until then. Whoever owns the project can be asked to confirm whether the page is intentionally empty or has been tampered with. Evidence:

• Homepage: the empty "site not found" state gives no legitimate content to validate against any claimed offering.
• Reputation: the current malicious flags from multiple security engines are the primary item to re-check.
• Behaviour: outbound POST activity to non-allow-listed hosts should be re-tested for persistence.

Summary Verdict

The assessment is critical and clearly cautionary. Confirmed external threat detections on an otherwise contentless page, together with unexplained outbound data transmission, outweigh the site's sound transport-layer hygiene. The identity of the operator is unknown, and available evidence does not support treating the domain as legitimate.

Infrastructure Integrity

The domain resolves entirely to Fastly edge servers on a trusted content-delivery network, which is the platform's standard front end. The origin server was not observable, so only the edge layer could be assessed. This protective infrastructure is a mitigating factor only. It does not offset the external threat detections, and the layer can obscure rapid content changes behind the edge.

Closing Assessment

The site should not be used for logins, credential entry, or any payment or financial interaction. Any visit should be limited to passive viewing, from an isolated or disposable environment. Nothing should be downloaded from it until the threat listings are cleared and the operator is independently confirmed.

Signals weighed against the site

• AbuseIPDB: 9 reports on hosting IP 2606:50c0:8002::153 (GitHub, Inc., Content Delivery Network), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.