Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
vps-craft.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 72% confidenceAbuseIPDB, 65 reports; shared hosting inflates reports | Risk |
| Domain age | 3 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a Chinese-language promotional directory and navigation page for virtual private server (VPS) offers. Its homepage title presents it as a curated "geek-preferred" marketplace of cost-effective VPS deals for developers. Its apparent purpose is to steer visitors toward third-party hosting promotions, most likely through referral or affiliate links.
Scam/Impersonation Risk
Contradictory signals are present. The domain has been flagged by an external blacklist, with one security engine rating it malicious and another rating it suspicious. This confirmed blacklist hit is the decisive adverse finding. It is reinforced by a high volume of recent abuse reports against the shared hosting address the site resolves to, and those reports have not been discounted. Because that address is shared infrastructure, the reports cannot be attributed to this site alone. They remain a material reputational signal alongside the blacklist hit. No brand impersonation or conflicting legal identities were observed. Browser-level testing found no wallet-connection prompts, clipboard manipulation, hidden forms, credential forms posting to external hosts, or content cloaking. However, the homepage triggered several data submissions to third-party destinations outside the expected set, which is notable for a page that is essentially a link directory. A directory of hosting promotions is a common vehicle for affiliate redirection and lure pages, which makes these outbound submissions and the blacklist hit more consequential for a domain with almost no track record.
- Homepage: an external blacklist lists the domain, with one malicious and one suspicious detection.
- Hosting address: 65 abuse reports from 16 distinct reporters, the latest only days before this assessment. They apply to a shared provider address rather than exclusively to this site.
- Homepage behavior: 3 POST submissions to non-whitelisted external destinations, plus 6 console errors during testing.
- Domain provenance: registered 2026-07-28 (~0.24 years, ~89 days old), so there is no established operating history.
Regulatory Verification Notes
The captured homepage text does not show licensing claims, a named operating company, or a registration number. For a hosting-promotion directory this is a disclosure gap rather than proof of wrongdoing. The real-world operator has not been independently connected to any person or business, so no legitimacy can be inferred from on-site claims. The registrant's details are withheld behind a privacy service, which is an administrative matter and is not treated as an identity contradiction. No third-party broker or regulator listing was matched for this domain. The reputational concerns above stand on their own and are not regulatory findings.
- Homepage: no licensing, company-registration, or legal-entity disclosure appears in the captured content.
- Registration: registered through Namecheap, with registrant details shielded by a privacy service.
- Hosting: served from AS16509 (Amazon-02, US).
- Transport encryption: TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-25.
What to Verify Next
Any dealings should begin with identifying who operates the site, because the site provides no verifiable operator. Any hosting provider the directory recommends should be checked directly, by typing the provider's known official address into a browser rather than following links from this page. Promotional claims and prices should be confirmed on the provider's own site. Any claimed affiliation with a named provider should be confirmed with that provider through its published support channel. Where the site offers contact routes, the official channels should be confirmed independently before any correspondence. Security teams should also determine whether the external submissions are legitimate analytics or affiliate tracking, or something less benign.
- Homepage: the title presents a curated VPS promotion list, so each referenced provider can be checked against its own official site.
- Browser testing: the non-whitelisted external submissions were observed during page load and interaction, and their destinations warrant inspection.
- Blacklist status: the detection is current and should be re-checked with the listing source before any exposure decision is made.
Summary Verdict
The assessment is critical and the posture is high-risk. A confirmed blacklist detection, reinforced by active abuse reporting, outweighs the mitigating signals: a working encrypted connection and stable, non-cloaked behavior. The domain is too new to offset these concerns. Legitimacy cannot be inferred, and the site's real-world operator remains unconnected to any verifiable identity.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN and WAF, and both observed addresses sit on Amazon-operated edge infrastructure in the US, so the origin server is not visible. This protection is a mitigating factor only. It cannot offset the reputation risk, and edge-only visibility prevents independent hosting verification and can mask rapid content swaps. A valid TLS certificate is present, but it is domain-validated only and says nothing about who operates the site.
Closing Assessment
At most, the site should be viewed read-only, for example from an isolated browser or sandbox. Logging in, entering credentials, or making any payment or financial commitment through it is not advisable. Any purchases should be made only on the hosting providers' own verified websites, and organizations should consider blocking or monitoring the domain until the blacklist status is resolved.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, registration and ownership, behaviour in a sandbox.
01 External reputation
- The server address behind this site has a strong record of abuse reports.External reputation
rule:EXT_ABUSEIP_SEVERE - A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
04 Behaviour in a sandbox
- The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS
Signals weighed against the site
- AbuseIPDB: 65 reports on hosting IP 75.2.60.5 (Amazon.com, Inc., Content Delivery Network), 72% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 15% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of vps-craft.com.
- The request stayed on vps-craft.com. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-07-28. Noted
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 75.2.60.5 |
| Name servers | LEE.NS.CLOUDFLARE.COM, MARTHA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2026-12-25 |
| Domain age | 0.24 years (continuous registration) |
| Domain expiry | 2027-07-28 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 72% confidence, 65 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about vps-craft.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.