Is zzzcoinonrbh.lol safe? TrustSniffer's low-trust assessment: 42/100

zzzcoinonrbh.lol
Download PDF Check another site How we score

Verdict

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

42 OUT OF 100
Low Trust

zzzcoinonrbh.lol is low-trust and potentially risky.

Sensitive Interaction Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines1 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host24% confidenceAbuseIPDB, 1624 reports; shared hosting inflates reportsClear
Domain age1 months oldMost scam domains are under a year oldRisk
CertificateEncrypted connectionIssued by YE2Noted
Hosted byAMAZON-02Server in USNoted

The page as captured

https://zzzcoinonrbh.lol/
Screenshot of the zzzcoinonrbh.lol homepage captured during the TrustSniffer assessment
What zzzcoinonrbh.lol served when TrustSniffer captured it on 2026-10-22. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

Full analysis

Overview

The website is a single-page promotional site for a meme-style cryptocurrency token branded "$TSUMIGI", with the tagline "Good Dog. Good Coin." The homepage gives a visitor short, brand-led marketing text and no substantive product, team or documentation content. Its apparent purpose is to promote and attract interest in a speculative token.

Scam/Impersonation Risk

The assessment is clearly cautionary. External threat intelligence currently lists the site as blacklisted: one security engine flagged it as malicious and another as suspicious. This is the decisive adverse signal. Separately, the domain was registered only weeks ago. A new meme-token domain with a very thin web footprint matches a common pattern for short-lived promotional or fraud-adjacent token campaigns. A separate reputational warning applies to one of the shared edge addresses the site resolves to. That address has a large volume of abuse reports, but they relate to a shared hosting provider's address rather than to this site specifically. They add background concern only, not proof of wrongdoing by the site. In the observed sessions the site made no external network calls, showed no wallet-drainer or clipboard-manipulation behaviour, no hidden forms and no cloaking. Those facts are mitigating but do not offset the blacklist listing. No brand impersonation, phishing confirmation or conflicting legal identities were observed. Evidence:

  • Homepage: the title and branding present a single token ("$TSUMIGI") with no verifiable product, team or issuer detail.
  • Domain registration: created September 2026, about 40 days old (~0.11 years), registered through PDR Ltd. d/b/a PublicDomainRegistry.com.
  • Reputation: the external blacklist flag is active (1 malicious and 1 suspicious detection). The abuse reports (1,624) apply to a shared provider address and are attributed to shared infrastructure.
  • Behavioural sandbox: three successful runs with zero external requests, zero console errors and no wallet-drainer or cloaking activity.

Regulatory Verification Notes

The captured homepage presents no licensing status, regulated-entity information or corporate registration details. It also gives no issuer or legal-entity name behind the token. For a site that promotes a financial-type asset, this is a verification gap rather than evidence of a scam in itself. No third-party broker or regulator listing matched this domain. The site's real-world operator has not been independently connected to any identifiable person or company, so no legitimacy can be inferred from branding alone. The domain holds a valid transport-encryption certificate, but a basic domain-validated certificate confirms only an encrypted connection, not the operator's identity or trustworthiness. Evidence:

  • Homepage: no licence, registration number, legal-entity name or regulator reference is presented in the captured content.
  • Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
  • Transport encryption: TLS certificate issued by YE2 (DV), valid to 2026-12-11 (about 49 days remaining).
  • Third-party broker dataset: no matching record.

What to Verify Next

Before any engagement, the operator behind the token should be identified through independent routes, such as a named issuer or legal entity, and any claimed registration should be confirmed directly with the relevant financial or digital-asset registry. Any token contract, supply or liquidity claims should be checked on public blockchain explorers, and the official social channels should be confirmed through sources independent of this website. Support and contact channels should likewise be confirmed through an independent route, not only the ones shown on the page. The status of the external threat listing should be rechecked later, because a clean result would change the picture. A listing that persists should be treated as a reason to disengage. Evidence:

  • Homepage: the token branding offers no contract address, issuer name or audit reference that could be cross-checked from the page itself.
  • Domain history: the domain's creation date is recent, so no long track record exists to lean on.
  • Reputation: the active external blacklist flag is the item whose status most needs re-confirmation.

Summary Verdict

The site presents an elevated risk posture. Active external threat detections combine with the immaturity of the domain and the absence of any verifiable operator identity. These factors outweigh the technically orderly behaviour observed during testing. The available evidence supports caution toward the site and does not support treating it as an established or legitimate entity.

Infrastructure Integrity

The site sits behind a trusted cloud provider's CDN/WAF, and only edge addresses were observable. This mitigates direct exposure, but it also prevents independent verification of the true hosting origin and can mask rapid content swaps. The provider's reputation does not transfer to the site, and the protective layer cannot offset the external reputation risk.

Closing Assessment

Interaction should be limited to passive, read-only viewing. Account login, credential entry and any payment or token-related transaction should be avoided until the operator is independently identified and the external threat listing is cleared.

Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

2 findings contributed to this verdict, raised by external reputation, hosting and network.

01 External reputation

  • A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation rule:EXT_BLACKLIST_MEDIUM

02 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D
  • The domain is young and has almost nothing else set up around it.Hosting and network rule:DNS_SPARSE_YOUNG_DOMAIN

Signals weighed against the site

  • AbuseIPDB: 1624 reports on hosting IP 63.176.8.218 (A100 ROW GmbH, Data Center/Web Hosting/Transit), 24% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

Identity verification

StatusUNKNOWN
Identity score50/100
Identity verification confidence30%
  • AI page analysis unavailable (page captured; identity not AI-verified)

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of zzzcoinonrbh.lol.

  • The request stayed on zzzcoinonrbh.lol. It was not redirected to another domain. Clear
  • Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
  • DNS for this domain is served by nsone.net, across 4 name servers. Noted
  • The registration is paid up to 2027-09-12. Noted
  • It is hosted on AMAZON-02, from a server in US. Noted

Domain intelligence

RegistrarPDR Ltd. d/b/a PublicDomainRegistry.com
HostingAMAZON-02 - Amazon.com, Inc., US
CountryUS
Server IP63.176.8.218
Name serversDNS1.P02.NSONE.NET, DNS2.P02.NSONE.NET, DNS3.P02.NSONE.NET, DNS4.P02.NSONE.NET
CDN / edge networkDetected (aws)
Resolved IP addresses2
Edge IP addresses2
Likely origin IP addresses0
SSL issuerYE2
SSL expiry2026-12-11
Domain age0.11 years (continuous registration)
Domain expiry2027-09-12
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 1 flagged | AbuseIPDB: 24% confidence, 1624 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about zzzcoinonrbh.lol at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about zzzcoinonrbh.lol

Is zzzcoinonrbh.lol a scam?

TrustSniffer found several risk patterns on zzzcoinonrbh.lol. It scored 42 out of 100 on 2026-10-22, a low-trust result. That is not proof of fraud: it means the evidence did not support treating the site as safe.

Is zzzcoinonrbh.lol safe to use?

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

What is the trust score of zzzcoinonrbh.lol?

zzzcoinonrbh.lol scored 42 out of 100 on 2026-10-22, which places it in the low-trust band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-22 · how we assess · report a mistake