Is senttobnb.org a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a recently launched, single-page website whose homepage carries only a few lines of text under the title "Amount". It shows no recognizable brand, product catalogue, service description or named operator, so its commercial purpose cannot be established from the content. The site's behavior does not clarify its purpose either.

Scam/Impersonation Risk: Contradictory signals are present, and they define the risk posture. Several independent security engines currently flag the domain as malicious or suspicious, and one of them is a tier-one security vendor. Together these constitute a confirmed blacklisting of the domain. Reputation sources also associate it with known phishing activity. No brand impersonation or conflicting legal identities were observed. The risk therefore rests on the external threat detections, not on anything the page claims. The domain is also very young, with a short and thin web-archive record, so there is no history of benign operation to offset those detections. The homepage's minimal, form-like presentation carries no content that could rebut the flags. Sandbox testing recorded no outbound network requests, no wallet-connection prompts, no clipboard manipulation and no content cloaking. These are neutral observations and do not offset the detections.

Regulatory Verification Notes: The captured homepage offers no legal entity name, no registration number and no licensing statement, and it links to no terms or policy pages. The site makes no regulated-service claim that could be checked against a registry. The operator's registration details are incomplete, which amounts to ownership opacity and is not an identity contradiction. Independent identity verification of the operator was not achieved, so no real-world affiliation can be attributed to the site. No third-party broker or regulator listing exists for it. The absence of licensing information is a transparency gap in itself. The elevated risk comes from the external detections, not from this gap.

What to Verify Next: The site should not be treated as an acceptable counterparty until the threat detections are resolved. If a prospective user was directed here, the sender should be contacted through a channel already known to be genuine, and asked to confirm independently that the link is official. Any organization that claims to operate the site should be asked to supply its legal entity name and, where relevant, its license number. Those details should be checked directly in the issuing registry and not through this site. Official contact and support channels should be confirmed from an independent, offline source. Before any further assessment, the detections should be re-checked on current threat-intelligence listings, because a delisting or a documented remediation would change the picture.

Summary Verdict: The available evidence supports an elevated-risk posture. Confirmed adverse reputation signals, a domain with no meaningful track record and an operator who cannot be identified converge on a conclusion that the site is not trustworthy for sensitive interaction. The sandbox's benign technical observations and a valid certificate do not outweigh the adverse reputation findings. Read-only exposure is the only use consistent with the evidence.

Infrastructure Integrity: The site resolves to a single IP address at a commodity hosting provider. No CDN or web-application firewall sits in front of it, so no protective layer shields the origin and nothing mitigates the reputation findings. The provider is a data-center and web-hosting operator, which fits ordinary shared hosting and does not on its own indicate abuse. Infrastructure protections would not have changed the verdict in any case.

Closing Assessment: Account login, credential entry and any payment or financial interaction with this site should be avoided. Any visit should be limited to passive viewing, and nothing should be downloaded or installed from it.