This site doesn't appear to be a traditional scam, but it's set up in a way that makes trust very difficult. There's no way to know who's behind brangus.io — no contact info, no about page, no real identity — and the domain is only 7 months old. For a personal blog that might be forgivable, but when someone is promoting products and asking for feedback without offering any way to reach them, proceed with skepticism.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
1
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
2
Close the tab
Especially if you got here from an email, text message or social media ad.
3
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
4
Warn others
Report the site and share this check with anyone who sent you the link.
Cross-referenced 39 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Oct 27, 2026.How we score →
Where the score comes from
We look at six areas. Here's how brangus.io did in each.
70
Security
Solid basics: a valid SSL certificate, enforced HTTPS, and no malware or phishing flags from Google Web Risk or blacklists. The site doesn't set extra browser protections like clickjacking prevention, but that's common for simple personal pages — no red flags here.
30
Identity
Who runs this site is effectively unknown. The domain is only 7 months old, the registrant is hidden behind a privacy service, there's no about page or team info, and no contact details are provided. For a personal blog that's somewhat normal, but combined with the lack of any business identity it's a concern.
50
Reputation
No blacklist hits and no web threats detected, which is clean. But the site has almost no track record — the domain is young, has no significant web archive history, and isn't recognized by any traffic ranking. There's just one Hacker News mention, which gives a little signal but not much.
20
Transparency
Critically opaque. There is no contact page, no email, no phone number, no about page, no team information — the only link to a human is an anonymous feedback tool. The site does link to an X profile, but that doesn't substitute for basic contact info on a site that's promoting products (music tracks, apps).
60
Compliance
For a personal blog or hobby project — which this appears to be — missing privacy policy and terms of service are completely normal and not a compliance risk. The site doesn't appear to collect payments or sensitive data, so there's no legal obligation breached here.
70
Infrastructure
Technically decent setup. Hosted on Vercel (a modern edge platform) with Google email handling, an SPF record for email authentication, and fast page loads. No DNSSEC, but that's still uncommon for small sites. Nothing alarming about the hosting or DNS.
What we checked
The 39 signals behind this report.
Security & Transport
Certificate Issuer: Neutral
Let's Encrypt
Certificate issued by Let's Encrypt
Google Web Risk: Good
Clean
No threats detected by Google Web Risk
HSTS Header: Good
Present
Site enforces HTTPS via HSTS
Protective DNS: Neutral
Not blocked
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
SSL Certificate: Good
Valid
Valid certificate, expires in 47 days
Search Cloaking: Neutral
Not detected
Neither a visitor arriving from a Google search nor Google's crawler was sent elsewhere or shown spam that a direct visit wasn't. Cloaking that checks the visitor's network address can't be seen from our server.
Security Headers: Neutral
1 of 6
Site sets some security response headers: HSTS
Server: Neutral
Vercel
Web server: Vercel
TLS Version: Good
TLS 1.3
Connection uses TLS 1.3
Identity & WHOIS
About Page: Neutral
Not found
No About / Team / Company page detected.
Branding: Neutral
Basic
Site has a favicon but no social sharing metadata
Business Disclosure: Neutral
Not found
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
Contact Info: Warning
Not found
No contact page link, email address or phone number found on the homepage
Domain Age: Warning
7 months
Domain created 2026-03-13 (7 months ago) — relatively new domain
Domain Expiry: Neutral
2027-03-13
Expires in 136 days
Legal Pages: Warning
Missing
No privacy policy or terms of service found — expected for commercial sites, normal for personal blogs and hobby projects
Registrant: Neutral
Privacy protected
The registration shows a privacy service or redaction notice in place of the owner. Most registrars do this by default since GDPR (2018), for companies as well as individuals, so it hides nothing unusual.
Registrar: Neutral
NameCheap, Inc.
Registered through NameCheap, Inc.
Infrastructure & DNS
CDN: Good
Vercel
Site is served behind Vercel — indicates real operational investment in edge infrastructure
DNS Blacklists: Neutral
Clean
Not listed by SpamCop, Barracuda and URIBL, the blacklists that answered
DNS Resolution: Good
1 IP(s)
Resolves to: 216.198.79.1
DNSSEC: Neutral
Not enabled
Domain is not signed with DNSSEC
DNSSEC: Neutral
unsigned
DNSSEC status from WHOIS
Email (MX Records): Good
1 record(s)
Mail servers: smtp.google.com.
Hosting Network (ASN): Neutral
AS16509 AMAZON-02
Hosted on: AS16509 AMAZON-02 (US)
Name Servers: Neutral
2 server(s)
DNS providers: dns1.registrar-servers.com., dns2.registrar-servers.com.
Page Load Time: Neutral
146ms
Fast page load, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
SPF Record: Good
Present
Domain has SPF email authentication configured
Reputation & Reach
Hacker News: Neutral
2 stories since 2026
Hacker News readers only upvoted links to this site in 2026, and one burst of attention says less than interest over the years. The most upvoted, "Survival LLM: AI assistant and emergency library that runs on your own computer" (2026), got 134 points.
Page Description: Neutral
brangus.io
Page Language: Neutral
en
HTML declares lang="en"
Page Title: Neutral
brangus.io
Sitemap: Neutral
Not found
No sitemap found — common for smaller sites
Social Media Presence: Good
1 platform
Homepage links to profiles on X
Structured Data: Neutral
None found
No structured data markup found
Tranco Rank: Neutral
Not ranked
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Web Archive History: Neutral
6 months
Earliest archive snapshot from 20260415
Website Status: Good
Online
Website is live and responding
robots.txt: Neutral
Not found
No robots.txt file — common for small sites
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
Brangus.io presents itself as a personal site: links to a Substack blog, an X profile, music tracks on Spotify and SoundCloud, and a collection of "vibecoded apps" and interactive tools. That sounds like a hobbyist or solo creator project, and on the surface there's nothing obviously malicious — no phishing, no malware, no blacklist hits.
But the trust problem is that there’s effectively no way to know who you’re dealing with. The domain is only 7 months old, the owner is hidden behind a privacy service, and there is no contact page, no email address, no phone number, and no about page on the site itself. The only link to a person is an anonymous feedback tool called admonymous and a profile on X. For a personal blog that's thin but not unheard of — plenty of hobbyists keep a low profile. The question is whether you’d be sharing any personal data, paying for anything, or relying on the information here.
If you're just browsing blog posts or listening to linked music, the risk is minimal. If brangus.io ever asks for payment, login credentials, or personal information, the lack of transparency becomes a serious reason to pause. The site isn’t obviously a scam, but it’s also not giving you enough to trust it with anything important. For now, treat it as an unknown entity and don’t hand over data until there’s a clearer picture of who runs it.