Verdict
tptkn.org shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | GPT summary status=skipped | No usable content for GPT summary (clean/dom/html all empty) |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 1.3 years oldRegistered history | Clear |
| Web archive | Archived since 2025Public history exists | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2025.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
tptkn.org is a web domain presenting an apparent online service, but the available site material does not reliably establish its operator, products, or business model.
Scam/Impersonation Risk
The site presents a confirmed external reputation and blacklist concern. Multiple independent security detections identify the domain as malicious or suspicious, including detections from Fortinet, Kaspersky, and Sophos. The evidence does not establish a specific brand impersonation, phishing page, or conflicting legal identity, but the confirmed blacklist status and malicious detections are sufficient to create a materially elevated risk for sensitive interaction. Observed behavior also includes suspicious external network activity and a destination mismatch, which further reduces confidence in the site’s integrity.
- External reputation assessment recorded 16 malicious detections and 1 suspicious detection among 22 evaluated results; Google Safe Browsing reported no malicious finding.
- Fortinet, Kaspersky, and Sophos were among the vendors flagging the domain, and the domain was also identified by an external blacklist.
- Archive records show first observation on 2025-07-17 and last observation on 2026-02-19, with 2 years tracked; no repurposing or semantic drift was identified.
Regulatory Verification Notes
The real-world operator identity remains unverified, and the available material does not establish licensing, registration, or a regulated business affiliation. This is a significant verification gap for any service that might solicit funds, credentials, or other sensitive information. The domain is registered through Gname.com Pte. Ltd. and is relatively recent; those facts provide administrative context but do not validate the operator or its activities. No matching third-party broker profile was identified, which is contextual only and not a licensing determination.
- Domain registered on 2025-05-19 and approximately 1.25 years old; registrar: Gname.com Pte. Ltd.
- Hosted on AS13335, CLOUDFLARENET – Cloudflare, Inc., US.
- TLS certificate issued by WE1 with DV validation, valid to 2026-09-21T23:15:38+00:00.
- No matching third-party broker profile was identified in the available reputational dataset.
What to Verify Next
Before any sensitive interaction, an independent source should confirm the legal entity operating the domain, its physical business details, and any authorization required for the services being offered. Any claimed license should be checked directly against the relevant regulator’s public register, using contact details obtained independently rather than relying solely on the website. Contact channels and payment destinations should also be validated through an offline or separately sourced route. Pending those checks, the appropriate posture is passive viewing only, with no login, credential submission, or financial transaction.
- Identity verification is currently inconclusive and requires independent corroboration.
- Licensing and registration status cannot be established from the available site material.
- The security detections described above warrant direct validation of the domain and operator before sensitive use.
Summary Verdict
The overall posture is critical risk and the site is not suitable for sensitive interaction on the present evidence. Its legitimacy and operator identity are not established, while the available external signals support a strongly cautionary conclusion.
Infrastructure Integrity
Cloudflare CDN/WAF protection and edge delivery through AS13335 provide a mitigating layer against direct exposure of the hosting environment, but this infrastructure is shared and does not establish legitimacy. All observed addresses were Cloudflare edge servers, with no origin server candidate identified in the analysis.
Closing Assessment
The domain should remain limited to passive observation unless independent operator, authorization, and contact-channel checks produce satisfactory results; credentials, authentication material, and financial information should not be submitted in the interim.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of tptkn.org.
- The request for tptkn.org ended on h6majs.walletstore.app, a different domain. Watch
- Registration is published under Gname.com Pte. Ltd.. Clear
- DNS for this domain is served by dnspod.net, across 2 name servers. Noted
- The registration is paid up to 2028-05-19. Clear
- The earliest public archive of this site is from 2025-07-17. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Gname.com Pte. Ltd. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 104.21.56.59 |
| Name servers | kent.dnspod.net, lee.dnspod.net |
| SSL issuer | WE1 |
| SSL expiry | 2026-09-21 |
| Domain age | 1.25 years (continuous registration) |
| Domain expiry | 2028-05-19 |
| Archive first seen | 2025-07-17 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about tptkn.org at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.