Is almal-capital.com a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Almal-Capital is an Arabic-language online trading website. Its homepage invites visitors to "start trading with a globally trusted trading company" and presents itself as a retail trading and brokerage service. The apparent business model is customer-funded trading accounts, with sign-in and registration forms leading visitors to open and fund an account.

Scam/Impersonation Risk

This is the decisive section of the assessment. The site is currently blacklisted by external threat-intelligence sources: a major security vendor classifies it as malicious, and several other engines mark it as suspicious. The available detections do not specify the category of threat, so the report does not assert phishing or malware distribution. The listing is nonetheless a confirmed negative reputation signal that the site's technical hygiene cannot offset. The homepage's self-description as a "globally trusted" trading company is an unverifiable superlative. It sits beside a domain with a very recent registration record and a thin infrastructure footprint, a combination typical of short-lived investment-solicitation sites. The homepage and its sign-in surfaces carry password forms, so the credential-capture exposure is real if the listing reflects malicious intent. The behavioral testing was otherwise clean. It found no cloaking, no clipboard manipulation, no hidden forms, no wallet-drainer behavior and no credential posting to external destinations. This lowers the likelihood of automated payload delivery but does not remove the reputational listing. No conflicting legal entities and no brand impersonation were observed. Evidence:

• Homepage: Arabic-language headline claiming a "globally trusted" trading company, with no supporting proof on the page.
• Homepage and sign-in surfaces: three password forms detected, none submitting to external destinations.
• Domain registration: created 2026-08-27 (~0.15 years, about 55 days old), registered through NameSilo, LLC behind a privacy-protection service.
• Web archive: 6 snapshots spanning 2018–2026 (9 years tracked), with only 1 capture in each of 2018, 2022 and 2026. The earlier captures do not align with the current registration date, so archive history cannot be taken as proof of continuous operation.
• External reputation: 1 malicious and 3 suspicious detections from security engines; the major browser safe-browsing list did not flag the site.

Regulatory Verification Notes

The site markets trading services, an activity that normally requires a licence or registration with a financial regulator. The pages analysed provide no regulatory status, licence number or named operating entity that could be matched to a registry, and the on-page disclosure position remains unclear. This is a verification gap, not evidence of fraud by itself, but here it coincides with the confirmed external listing. Independent attribution of the site to any real-world company or person has not been established. No third-party broker-rating record matched the domain, so there is no reputational context from that source either way. The technical foundation is basic. The site presents a valid certificate, but it is a domain-validated one that confirms only control of the domain, not the identity of the operator. Evidence:

• Homepage: no licence number, regulator name or registered company name located in the captured content.
• Hosting: served from AS200019 (AlexHost SRL, Romania), with a RIPE registry allocation.
• Transport encryption: TLS certificate issued by YE2 (DV), valid to 2027-01-19.
• Third-party broker database: no matching record for the domain.

What to Verify Next

Any contact with the operator should start from the claimed regulatory status. The trading firm's name, licence number and jurisdiction should be requested and checked directly in the official public register of the relevant financial regulator, not through links or documents supplied by the site. Official support and contact channels should be confirmed through an independent, offline route. The site's current listing status should be rechecked with the browser safe-browsing services and security vendors, because a listing on a compromised or newly launched site can change. Any claim of the operator's affiliation, awards or client numbers should be treated as unproven until corroborated by an independent source. Any intended deposit should first be checked for payment-protection and recovery options. Evidence:

• Homepage: "globally trusted" claim with no named entity or registry reference to check.
• Domain registration: recent creation date, so there is no long operating track record to lean on.
• Sign-in surfaces: three password forms, so credential exposure is the main practical risk.

Summary Verdict

The assessment is a high-risk, clearly cautionary posture. A confirmed external threat listing, a very young domain, and unverified operator identity and regulatory standing all point the same way. The clean behavioral results and valid certificate are minor mitigating details, and they do not change this conclusion.

Infrastructure Integrity

The domain resolves to a single IP address at AlexHost, a Romanian commodity hosting provider. No CDN or WAF layer was detected, so the site gets no edge-level protection, and nothing here offsets the reputation risk. Three unconfirmed DNS heuristics were noted: a mismatch between the hosting country and the registry region, fragmented infrastructure, and a young domain with a low footprint. They are indicative only and carry no weight beyond the confirmed listing.

Closing Assessment

Only passive, read-only viewing is appropriate. Logging in, entering credentials, or making any deposit or other financial transaction should be avoided until the external listing is cleared and the operator's licensing is independently confirmed.