Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
yomnetwork.xyz shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website yomnetwork.xyz presents a single-page promotional landing page themed around a "YOM Airdrop", titled as a guide to claiming the "$YOM" token. It appears to be a crypto-token giveaway or claim funnel that steers visitors toward an airdrop-claim process rather than a conventional product or service business.
Scam/Impersonation Risk
Active contradictory signals are present, and this section carries the most weight in the assessment. The domain is blacklisted by external threat-intelligence sources, which independently flag it as malicious and suspicious. This is a confirmed adverse reputation signal, not a soft warning. The homepage's airdrop-claim framing ("how to claim $YOM token") is a lure pattern widely associated with token-claim scams: a visitor is promised free tokens and is then directed into a claim step that typically asks for wallet access or credentials. No conflicting legal-entity names were observed, and no brand impersonation was confirmed. However, the site's name and token branding cannot be tied to any independently verified project or operator. The domain was registered only weeks ago, which is typical of short-lived campaign infrastructure, and the early blacklist listing fits that profile. Automated behavioural testing recorded no wallet-connection prompts, clipboard tampering, hidden forms, or credential posts to third parties. This lowers the chance that harm is delivered on the landing page itself, but it does not offset the reputation findings. The page's heavy outbound request traffic and repeated front-end script errors point to a hastily assembled or externally dependent build.
- Homepage: titled as a guide to claiming the "$YOM" airdrop token, a token-claim lure with no verifiable project or operator behind it.
- External reputation: 2 engines rate the domain malicious and 2 suspicious, and it is listed on an external blacklist.
- Domain provenance: registered 2026-09-05 (~49 days old, ~0.13 years), a very young domain.
- Behavioural testing: 3 of 3 runs succeeded. No wallet-connect, drainer, clipboard-hijack, or hidden-form activity was seen. There were 27 external XHR calls, 9 external POSTs, 9 console errors, and up to 97.6% external traffic on some pages.
Regulatory Verification Notes
The site is not associated with any regulated entity or licensing regime, and no third-party broker or regulator profile matches it. The homepage gives no operator name, registered company, licence, or contact details that could be tested against a registry, so the operator's identity cannot be independently connected to any real-world person or organisation. Registration details are also incomplete, which amounts to ownership opacity and is an administrative limitation, not an identity contradiction. A crypto airdrop or token distribution with no named issuer, terms, or jurisdiction leaves a participant with no recourse path. The registrar is a commercial one, Global Domain Group LLC. The site's transport encryption is a basic domain-validated certificate. It confirms an encrypted connection only and says nothing about who operates the site or whether it is legitimate.
- Homepage: no operator, company, licence, or jurisdiction identified alongside the token-claim offer.
- Registration: registrar Global Domain Group LLC; registration runs to 2027-09-05.
- Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-04, about 40 days remaining.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Before any engagement, confirm through the official channels of an established, independently known project whether a "YOM" token or airdrop exists and whether it uses this domain. Do not rely on links, social handles, or claim instructions published on this site. Check the supposed token contract and any announced distribution through independent blockchain explorers and the project's verified accounts, not through the site. Treat any claim step that asks for a seed phrase, wallet signature, or token approval as a hard stop. If the site is being assessed for organisational blocking, report it to the relevant security team so the existing threat listings can be corroborated. Also confirm any official support or contact channels through an independent route.
- Homepage: the claim guide gives no independently checkable project, issuer, or token contract.
- External reputation: current malicious and suspicious detections support verifying off-site only.
- Domain provenance: a registration of roughly seven weeks offers no track record to lean on.
Summary Verdict
The site carries an elevated risk posture. Confirmed adverse reputation signals, a very recent registration, and an unverifiable operator behind a token-claim offer converge on a high-risk classification. Technical hygiene such as encryption and stable page delivery does not change that outcome.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server was not visible, so hosting cannot be independently attributed to the operator. The edge layer also provides bot-challenge protection and stable responses. These are mitigating factors only, because the same shielding is available to any customer and says nothing about intent. A sparse DNS footprint for such a young domain is an unconfirmed heuristic and is not treated as a confirmed risk.
Closing Assessment
The site should not be used for login, wallet connection, credential entry, token approvals, or any financial interaction. At most, it should be viewed passively and in isolation, and it should not be linked to or recommended to others until the threat detections are cleared and an accountable operator is independently identified.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of yomnetwork.xyz.
- The request stayed on yomnetwork.xyz. It was not redirected to another domain. Clear
- Registration is published under Global Domain Group LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-05. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Global Domain Group LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3033::6815:4794 |
| Name servers | COSMIN.NS.CLOUDFLARE.COM, ROBIN.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-04 |
| Domain age | 0.13 years (continuous registration) |
| Domain expiry | 2027-09-05 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about yomnetwork.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.