Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
theindex.buzz shows high-risk / scam indicators.
| What this site appears to be | The page promotes buying the $INDEX token to earn fee-funded distributions of tokenized stocks. The headline 'Earn stocks' overstates what holders get, since the disclaimer says these are not brokerage shares and carry no dividends or voting rights. No legal entity, audit, contract address or contact is shown for a financial purchase, and a 'DEMO' balance row appears among the figures. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website presents a token-purchase and distribution dashboard for a crypto asset called $INDEX, using the headline "Hold The Index. Earn stocks." and a "Buy $INDEX" call to action. It claims that a 3% ETH fee on swaps is collected by a treasury, which buys a basket of tokenized equities and distributes them pro rata to wallets holding above a stated token threshold. The apparent business model is an investment-like, deposit-first scheme in which visitors buy a token in order to receive ongoing earnings.
Scam/Impersonation Risk
One contradiction is confirmed: the domain is currently blacklisted by external threat-intelligence reputation sources, with one engine rating it malicious and another suspicious. No brand impersonation, conflicting legal identities, or credential-phishing mechanics were detected. The risk therefore comes from the blacklisting together with a page whose claims are not backed by evidence. The headline "Earn stocks" conflicts with the site's own disclaimer, which states that distributions are not brokerage shares and carry no dividends or voting rights. The homepage shows precise-looking figures: "Total value distributed" of $1,860,466.14, 816.00 ETH in fees collected, 4,126 wallets, and per-stock payout rows for AAPL, NVDA, TSLA, AMD and SPCX. It attributes these to "contract and pool reads" but publishes no contract address, audit, or explorer reference. The figures cannot be checked, and they are hard to reconcile with a domain registered only days ago. A balance row labelled "DEMO" sits among the live metrics, which suggests the displayed numbers may be illustrative rather than real. The flow of value from fees to treasury purchases to holder payouts is entirely unverifiable from the page. Sandbox testing did not observe wallet-drainer behavior, clipboard hijacking, hidden forms, or credential capture. This is a limited mitigating observation and does not offset the blacklisting or the unsupported yield claims.
- Homepage: external reputation sources currently list the domain, with one malicious and one suspicious detection.
- Homepage: the "Earn stocks" headline conflicts with the disclaimer that the distributed assets are not brokerage shares and carry no dividends or voting rights.
- Homepage: "contract and pool reads" metrics and a "DEMO" balance row appear with no contract address or audit.
- Domain registered 2026-10-05 (~14 days old, expiring 2027-10-05), and the web archive holds a single snapshot, first and last seen 2026-10-06.
Regulatory Verification Notes
The site names no operating legal entity, regulator, license, registration number, audit firm, or physical or contact address. It does carry terms, privacy and informational-disclaimer sections. This is a serious disclosure gap for a page that solicits a financial purchase and promises ongoing earnings. It is a verification shortfall rather than evidence of wrongdoing on its own, but here it adds to the confirmed blacklisting. No third-party broker or regulatory reputation record exists for the site, so there is no independent basis to treat it as a regulated or supervised product. The domain is registered through PDR Ltd. (PublicDomainRegistry.com), which does not establish anything about the operator. The site's identity could not be independently tied to any real-world person or company.
- Homepage and footer: no legal entity, license, or registration number is shown alongside the token purchase.
- Disclaimer, terms and privacy sections: these exist but contain no operator identity or complaint channel.
- Served from AS13335 (Cloudflare); TLS certificate issued by YE2 (DV), valid to 2027-01-04.
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com.
What to Verify Next
Any engagement should begin with independent confirmation that the claimed distributions exist on-chain. That means locating the genuine $INDEX token contract through an independent block explorer and comparing the actual holder count, fee inflows and treasury stock purchases with the 4,126 wallets and 816.00 ETH the page asserts. The legal status of the product should be checked with the securities or financial regulator in the jurisdiction of any prospective participant, since a fee-funded payout structure resembles an investment offering. Any operator identity or official contact channel should be confirmed through an independent route rather than through links on the site.
- Homepage: advertised wallet, fee, and distribution totals are the figures to compare against on-chain data.
- Homepage: the token threshold and price quote ($0.0196) should be checked against the real market pool.
- Terms and disclaimer pages: no named issuer exists to check with a registry, so any regulatory enquiry must start from the product description.
Summary Verdict
The overall posture is high-risk. A confirmed external blacklisting, a very young domain, and a deposit-first investment proposition with unverifiable returns converge on a clearly cautionary assessment. The site cannot be treated as trustworthy for login, credential, or financial interactions, and only passive, read-only viewing is consistent with the evidence.
Infrastructure Integrity
The site is served behind Cloudflare's CDN and WAF, with a valid DV TLS certificate and bot-challenge protection. All observed addresses are CDN edge servers, and the origin host is not visible. This is a mitigating factor only. It shows that basic transport security is in place, but it does not validate the operator, and edge-only visibility prevents independent hosting verification and can mask rapid content changes. The infrastructure does not offset the reputation risk.
Closing Assessment
Do not connect a wallet, buy $INDEX, or deposit any funds through this site. Limit any interaction to read-only viewing until independent, on-chain, and regulatory confirmation of the project exists.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of theindex.buzz.
- The request stayed on theindex.buzz. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-05. Noted
- The earliest public archive of this site is from 2026-10-06. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:3e26 |
| Name servers | sima.ns.cloudflare.com, kai.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-04 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-05 |
| Archive first seen | 2026-10-06 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about theindex.buzz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.