Is ai-gradient.network safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Ai-gradient.network is a single-page website titled "Gradient Dashboard" that offers "A Special Reward" to invited users only. It asks a visitor to enter an invitation code received by email and then press "Access Rewards". The page gives no description of a product or service, no operator, and no pricing. Its apparent purpose is an invite-gated rewards or sign-up funnel whose business model cannot be determined from the visible content.

Scam/Impersonation Risk

This site shows confirmed contradictory signals, and its risk posture is elevated. It appears on external blacklists. More than one independent reputation source flags it as malicious, and a tier-one security vendor is among those flagging it. This is a confirmed blacklisting, not a speculative concern. No brand impersonation and no conflicting legal identities were observed, so the risk comes from the reputation record and the nature of the page. The homepage is an invitation-code gate with no accompanying context. Invite-only "special reward" mechanics are a common pattern in reward-claim and onboarding lures. They create a sense of exclusivity while a visitor is steered into an account or deposit flow that cannot be inspected beforehand. The automated business-model assessment also flagged a deposit-before-service pattern, although the captured text itself describes no deposit. The site is also very new, and its page content is thin. During behavioural testing, nearly all page activity consisted of requests to third-party endpoints, mostly outside any recognised allow-list. The page also carries one analytics tracker, one ad-network tracker and one tracking pixel, which is out of proportion for a 130-character page. No cloaking, hidden forms, wallet-drainer behaviour or clipboard manipulation was detected. The posture rests on the reputation record and the opacity of the offer, not on observed malicious page behaviour. Evidence:

• The homepage contains only the title "Gradient Dashboard", the text "A Special Reward", an instruction to use the emailed invitation code, and an "Access Rewards" action, with no service, owner or terms described.
• Domain registered 2026-09-19 (~31 days old), through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• The web archive holds 2 snapshots, spanning 2026-09-19 to 2026-09-20 (1 year tracked), so there is no meaningful operating history.
• Behavioural testing across 3 runs recorded 7 external requests, 6 of them to non-allow-listed destinations, and no password or external-form submissions.

Regulatory Verification Notes

The homepage is the only page captured. It has no legal or identity pages, no named operating entity, no registered address, no licence or registration number and no contact channel. The site claims no licence or regulatory status, and none could be corroborated independently. Operator identity is therefore unverified, and ownership and governance are opaque. Because the site invites participation in a reward programme, which could involve financial or personal-data exchange, the absence of any accountable party is a material gap. It adds to the reputational concerns above but is not by itself evidence of fraud. No third-party broker or regulator listing was matched for this domain. Evidence:

• The homepage shows no company name, jurisdiction, licence number, privacy policy or terms of service.
• Served from AS214036 (Ultahost, Inc.), with a server located in South Africa.
• TLS certificate issued by YR2 (DV, domain validation only), valid to 2026-12-18. This confirms domain control, not organisational identity.

What to Verify Next

Any contact with this site should begin by establishing independently whether the invitation actually exists. A recipient should check the original email's sender and headers and confirm with the claimed sender through a separately sourced, offline channel. The recipient should not rely on any link or reply address in the message. The operating entity behind the "Gradient" name should be identified through an independent source, and any claimed authorisation should be checked against the relevant public registry. Official support channels should be confirmed from an independent source, not from the site. A security team should also check whether the invitation code arrived unsolicited, since an unsolicited code is more consistent with a lure. Evidence:

• The homepage describes no reward mechanics, issuer or eligibility rules that could be cross-checked.
• The invitation-code gate is the only entry point, and no other pages were captured.
• Blacklist status should be re-checked in a later review, since the domain is only a few weeks old and its record is still forming.

Summary Verdict

The overall posture is high risk and clearly cautionary. External reputation sources have confirmed adverse detections, the operator is unidentified, and the offer is opaque. These signals converge and cannot be offset by the technically valid certificate or by the stable page behaviour recorded in testing. Legitimacy is not supported by the available evidence.

Infrastructure Integrity

The domain resolves to a single address at a commodity hosting provider, Ultahost, with no CDN or WAF in front of it. The origin server is therefore directly exposed, and no protective layer mitigates the reputational findings. The hosting is a generic data-centre environment with no abuse reports against the address. That is neutral and does not offset the external detections.

Closing Assessment

Treat the site as untrusted. At most, limited read-only observation from an isolated environment is appropriate. Do not enter the invitation code, any credentials or any personal data, and make no payments or deposits. Any related email should be treated as potentially hostile and reported to the organisation's security team.