Is 365k22.cc a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents a short Chinese-language verification and security checkpoint rather than a conventional commercial or financial-service site. Visitors see a loading indicator, a reference to a 360 security check, and brief reassurance text, but no identifiable product, transaction flow, business description, or visible contact and legal navigation.

Scam/Impersonation Risk

The site has a critical sensitive-interaction risk posture. No identity contradiction or brand impersonation was observed in the captured page, and the page itself contains no login form, payment form, or visible monetization flow. However, the domain is blacklisted by external sources, with malicious detections from multiple security providers; this is a confirmed contradiction that outweighs the otherwise limited page-level content findings. The absence of visible phishing mechanics in the capture does not neutralize the external threat evidence, particularly because the page is only a transitional checkpoint and may not expose the complete interaction surface.

Regulatory Verification Notes

The available material does not establish the real-world operator, legal entity, regulated status, or licensing basis of the website. The captured content is limited to a security checkpoint and provides no visible license number, licensing authority, corporate identity, terms, or privacy disclosure. This is a material verification gap for any service that might later request credentials, funds, or other sensitive information. The registrar is Spaceship, Inc.; that registration fact does not independently verify the operator. The absence of a broker-dataset match provides no regulatory conclusion either way.

What to Verify Next

Any claimed operator should be matched to an independently sourced corporate record and, where relevant, confirmed through the applicable financial-services regulator before sensitive engagement. Any licensing assertion should be checked directly against the regulator’s current register using independently obtained details rather than information supplied only by the site. Contact channels and any eventual destination reached after the checkpoint should be confirmed through an offline or independently published route. Until those checks are complete, interaction should remain limited to passive observation and controlled technical analysis.

Summary Verdict

The website’s overall posture is critical and unsuitable for sensitive interaction. Available evidence does not independently verify the operator, while confirmed external threat and blacklist signals create a substantial basis for treating the site as unsafe for credentials, financial activity, or other high-impact actions.

Infrastructure Integrity

Cloudflare CDN and WAF protection provide a mitigating layer against direct exposure of the hosting environment, but they are shared protective infrastructure and do not establish legitimacy. All observed addresses were Cloudflare edge addresses, with no origin candidate identified in the analysis.

Closing Assessment

Sensitive interaction should not proceed; any necessary investigation should be conducted through isolated, read-only methods until the operator, destination behavior, and applicable authorization have been independently established.