---
title: "Is tfaba.net Safe? Trust Score 70/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "tfaba.net"
verdict: "Moderate Trust"
title: "Is tfaba.net Safe? Trust Review, 70/100"
trust_score: 70
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/tfaba.net
assessed: 2026-10-13
---

# Is tfaba.net safe? TrustSniffer's moderate-trust assessment: 70/100

## Verdict


**Verdict: Moderate Trust, trust score 70/100.** tfaba.net is moderately trusted.

Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.

Labels: Safe for Read-Only, Governance Risk

Assessed 2026-10-13 by automated analysis. Classification confidence 75%.

| Field | Value |
| --- | --- |
| What this site appears to be | Technical documentation for TFABA, an open-registration agent marketplace pilot describing agent registration, SIXP 0.1 publication APIs, signing formats (Ed25519), task protocol, examples and implementation notes. The site states no payment processing occurs and providers run on their own infrastructure. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | None flagged it (VirusTotal) | Clear |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 255 reports; shared hosting inflates reports) | Clear |
| Domain age | 1 days old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by YR2) | Noted |

## The page as captured


![Screenshot of the tfaba.net homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/tfaba.net/screenshots/first.png)

_What tfaba.net served when TrustSniffer captured it on 2026-10-13. The page may look different now._

## Key findings


- Automated classification: Safe for Read-Only.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag.

## Full analysis


### Overview

TFABA is a technical documentation site for an open-registration agent-to-agent marketplace pilot. It presents APIs, signing conventions, task workflows, reference-client material, service discovery, and implementation guidance for software agents, with the stated model that providers execute work on their own infrastructure rather than through site-operated payment processing.


### Scam/Impersonation Risk

No blacklist, phishing, malware, brand-impersonation, or conflicting-identity indicators were observed. The site’s content is internally consistent with a developer-focused marketplace registry: it describes Ed25519 agent identities, SIXP 0.1 publication APIs, signed task operations, provider-local execution, and a staged task lifecycle rather than presenting financial promises or requesting sensitive credentials through a login form. A reported-abuse signal associated with a shared CDN address was explicitly discounted because it was attributed to shared infrastructure, was whitelisted, and carried no site-specific confidence. The available evidence therefore supports an apparently benign technical project, although the operator’s real-world identity is not independently verified.


Evidence:
- The homepage describes TFABA as an “open-registration agent marketplace pilot” and states that providers execute tasks on their own infrastructure; page-level analysis found no fraud red flags.
- The homepage and documentation describe Ed25519 identities, signed registration and publication workflows, and task request, acceptance, delivery, and completion procedures; no login form or sensitive form was detected.
- The domain was registered in 2026 and is approximately 1 day old; archival coverage records 1 snapshot spanning 2026–2026, tracked across 1 year.
- External checks recorded 255 reports against shared CDN infrastructure, but the address was whitelisted, associated with Vercel, Inc. as shared infrastructure, and assigned a confidence score of 0.

### Regulatory Verification Notes

The site presents an informational software and marketplace pilot rather than a financial, investment, or payment service, so the supplied material does not establish a regulated activity or a licensing claim. Its technical documentation is substantive, but it does not independently connect TFABA to a named legal entity or provide a verified operator identity. This is a verification limitation rather than evidence of impersonation or fraud. The available third-party broker-context check produced no match and should be treated only as contextual reputation information, not as a licensing determination.


Evidence:
- The homepage and documentation state that TFABA does not process payments and that providers perform tasks on their own infrastructure.
- The site provides linked documentation for tasks, inboxes, schemas, examples, and implementation notes, but the supplied pages do not identify a verified legal operator or licensing authority.
- The site is served from AS16509, Amazon.com, Inc., US; its TLS certificate is issued by YR2 at DV validation level and is valid to 2027-01-10.
- The site’s transport encryption was valid during analysis, and the broker-context dataset reported no match.

### What to Verify Next

Before any sensitive or high-value engagement, independently establish who operates TFABA and confirm that any counterparty using the marketplace is separately identifiable and suitable for the intended activity. Review the task, signing, withdrawal, and provider-execution documentation before running the supplied client or downloaded guide; any code or control instructions should be inspected in an isolated environment. Contact-channel details should be confirmed through an independent route rather than relying solely on information presented by the site.


Evidence:
- The homepage directs agents to obtain and review a machine-readable guide before using command-line download instructions.
- The documentation set includes task, registration, publication, inbox, schema, and reference-client material that can be compared for consistent signing and execution behavior.
- The site advertises provider-controlled infrastructure and signed opt-in instructions, making independent validation of the provider and its execution environment relevant before task submission.

### Summary Verdict

TFABA presents a **moderate-trust, apparently benign technical project** with no observed scam or impersonation contradictions. Its content and observed behavior are consistent with informational developer documentation, but the available evidence does not independently verify the real-world operator. The resulting posture is appropriate for informational and read-only engagement, with greater assurance required for consequential activity.


### Infrastructure Integrity

The site is protected by a CDN/WAF layer, with observed edge addresses on AS16509 operated by Amazon.com, Inc. The origin server was not observable in this analysis, so the infrastructure provides exposure mitigation but does not independently establish site ownership or legitimacy.


### Closing Assessment

Ordinary documentation review is proportionate, while operator and counterparty checks should be completed before sensitive credentials, code execution, or high-value commitments are involved.


_Written analysis generated 2026-10-13 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by governance, hosting and network, history in the web archive, registration and ownership.

### 01 Governance
- What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified. (Governance `rule:gov_business_model_cap`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)
- The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Registration and ownership
- The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`)
- Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check. (Registration and ownership `rule:KF_WHOIS_PRIVATE`)

### Signals weighed against the site

- AbuseIPDB: 255 reports on hosting IP 216.198.79.1 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 25% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of tfaba.net.

- The request stayed on tfaba.net. It was not redirected to another domain. (Clear)
- Registration is published under Squarespace Domains LLC. (Clear)
- DNS for this domain is served by squarespacedns.com, across 4 name servers. (Noted)
- The registration is paid up to 2029-10-12. (Clear)
- The earliest public archive of this site is from 2026-10-12. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Squarespace Domains LLC |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.1 |
| Name servers | NSC1.SQUARESPACEDNS.COM, NSC2.SQUARESPACEDNS.COM, NSC3.SQUARESPACEDNS.COM, NSC4.SQUARESPACEDNS.COM |
| CDN / edge network | Detected |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | YR2 |
| SSL expiry | 2027-01-10 |
| Domain age | 0.00 years (continuous registration) |
| Domain expiry | 2029-10-12 |
| Archive first seen | 2026-10-12 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 0% confidence, 255 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about tfaba.net at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [zeromq.org](https://trustsniffer.com/report/zeromq.org), also an open-source project site (High Trust, 100/100)
- [berlios.de](https://trustsniffer.com/report/berlios.de), also an open-source project site (High Trust, 87/100)
- [gitcoin.co](https://trustsniffer.com/report/gitcoin.co), also an open-source project site (High Trust, 100/100)
- [rutoken.ru](https://trustsniffer.com/report/rutoken.ru), also an open-source project site (High Trust, 100/100)
- [walcoin.co](https://trustsniffer.com/report/walcoin.co), also an open-source project site (Low Trust, 35/100)
- [paypal.com](https://trustsniffer.com/report/paypal.com), also an open-source project site (High Trust, 90/100)
- [softether-download.com](https://trustsniffer.com/report/softether-download.com), also an open-source project site (High Trust, 95/100)
- [validator.sbs](https://trustsniffer.com/report/validator.sbs), also an open-source project site (Low Trust, 37/100)
- [coinspot.com.au](https://trustsniffer.com/report/coinspot.com.au), another site assessed as moderate-trust (Moderate Trust, 65/100)
- [jornaldacidadeonline.com.br](https://trustsniffer.com/report/jornaldacidadeonline.com.br), another site assessed as moderate-trust (Moderate Trust, 75/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/tfaba.net) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/tfaba.net · assessed 2026-10-13.*