Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
tge-variational.pro is low-trust and potentially risky.
| What this site appears to be | The capture shows a Cloudflare interstitial stating that the requested website has been reported for potential phishing. It offers 'Learn More' and 'Ignore & Proceed' options and shows a Cloudflare Ray ID and the visitor's IP. The target site's actual content, forms, and business activity are not visible, so no brand or service claims can be verified. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The domain tge-variational.pro presented no business content when captured. The only page returned was a phishing-warning interstitial from the site's edge security layer, stating that the requested website has been reported for potential phishing and offering "Learn More" and "Ignore & Proceed" options. No products, pricing, forms, brand claims or contact details were visible, so the site's purpose and business model cannot be established from the capture.
Scam/Impersonation Risk
This is a confirmed adverse reputation case. The domain is blacklisted: several independent threat-intelligence engines flag it as malicious, and a separate external blacklist signal corroborates them. The edge security provider's own interstitial describes the site as reported for potential phishing. The capture shows no login form, hidden form, wallet-connection prompt, clipboard manipulation or brand impersonation, because the real site content was never reached. That absence is not exculpatory. It reflects the interstitial blocking the view, not a clean inspection of the site. The domain is also newly registered, which fits the profile of short-lived infrastructure used for credential-harvesting or onboarding lures. The sandbox also recorded heavy external request activity, a large DOM mutation spike after interaction and a high console-error count. These are secondary, but they fit a page that is unstable or still being assembled. No conflicting legal identities were observed, so there is no identity contradiction. The risk arises from the blacklist and phishing-warning convergence.
- Homepage capture: a "Suspected Phishing" warning page replaced the site's content, and its text states the site "has been reported for potential phishing."
- Reputation checks: 3 threat-intelligence engines classified the domain as malicious (55 harmless, 33 undetected), and an additional external blacklist flag was set.
- Domain provenance: registered 2026-09-24 (~25 days old, ~0.07 years) through Eranet International Limited, with expiry set for 2027-09-24.
- Behavioral sandbox (3 of 3 runs completed): 59 external XHR/fetch requests, 9 external POST requests, 16 console errors and a DOM change of 1,518 mutations after interaction.
Regulatory Verification Notes
No licence, registration number, legal entity name or regulator affiliation could be observed, because no legal, terms, about or contact page was reachable behind the warning interstitial. The site makes no regulated-status claim, and no third-party broker record matches the domain. This leaves the real-world operator unverified and the ownership and governance structure opaque. Both gaps are secondary here. The reputational findings are the decisive factors, and no licensing or disclosure position could lift the assessment above them.
- Legal and identity pages: none were captured, and the warning page lists no operator, company or licence information.
- Broker-reputation dataset: no record matched this domain, which gives neither positive nor negative regulatory context.
- Transport and hosting: the TLS certificate is domain-validated only (issuer YE2, valid to 2026-12-23), which confirms encryption but not operator identity. The site is served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Any prospective interaction should first be tested against a credible, independent claim of what this site is. The domain name suggests a crypto or token-event ("TGE") product, but nothing on the captured page supports that reading. The claimed organisation should be identified from an independent source. Its official domain and support channels should then be confirmed through a route that does not originate from this site, and the domain compared against that official domain. A security team should also treat any invitation, message or advertisement that points to this domain as a suspected phishing lure and report it to the sender's platform. The domain's blocklist status should be re-checked later. A site this new may be taken down or cleaned, but a later change of status would need fresh evidence.
- Homepage capture: no brand, product or service was named, so no official counterpart can be identified from the site itself.
- Registration timing: the domain was created weeks before this assessment, so a long-standing official presence cannot be assumed.
- Page behavior: the interstitial offers "Ignore & Proceed," a bypass that would expose a visitor to the unreviewed underlying page.
Summary Verdict
The overall posture is elevated risk with a cautionary, security-forward stance. Multiple independent reputation sources agree that the site is malicious, and the very recent registration and unverified operator identity compound that finding. Isolated positive technical signals, such as a valid certificate and a recognised hosting network, do not offset the reputation evidence and do not indicate legitimacy.
Infrastructure Integrity
All observed addresses are Cloudflare edge servers, so the true origin host was not observable. Cloudflare's protective layer is the source of the phishing interstitial itself. This is a mitigating factor only: it limits direct exposure to the origin, but it also prevents independent verification of where the content is hosted. The CDN does not vouch for the site behind it. The valid, publicly trusted certificate shows the connection is encrypted, not that the operator is trustworthy.
Closing Assessment
The site should not be used for login, credential entry, wallet connection or any financial interaction. The "Ignore & Proceed" option should not be used, and nothing should be downloaded from the site. Organisations should block the domain at the web and email gateway and report any inbound links to it as suspected phishing.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, page content, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of tge-variational.pro.
- The request stayed on tge-variational.pro. It was not redirected to another domain. Clear
- Registration is published under Eranet International Limited. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-24. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Eranet International Limited |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:4cf |
| Name servers | ursula.ns.cloudflare.com, quentin.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-23 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-24 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about tge-variational.pro at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.