Is cedehub.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Cede Hub is a single-page website presenting itself under the tagline "Trade | Hold | Earn", which positions it as a platform for trading, holding and earning on digital assets or similar financial products. The captured homepage carries only a short block of text, and its apparent purpose is to draw visitors into a trading and yield-style service. No operator identity, product terms or return figures could be confirmed from the page.

Scam/Impersonation Risk

This is the decisive area of concern. The domain is currently flagged as malicious by multiple independent security engines, including several top-tier vendors, and it carries a confirmed blacklist classification from external reputation sources. Behavioural sandboxing of the homepage also recorded activity classified as malware execution, and the analysis recorded a prior phishing association for the domain. The sandbox observed no outbound data traffic, no hidden forms, no wallet-connection attempts, no clipboard manipulation and no cloaking. That absence does not offset the threat-intelligence detections and the malware-execution classification. Either the site is distributing harmful content, or the detections reflect abuse that the sandbox's network telemetry did not capture. The domain was also registered very recently. A "Trade | Hold | Earn" pitch on a newly created domain is a common pattern for short-lived fraudulent financial or crypto-style platforms, because it invites deposits and credential entry before reputation can accumulate. No conflicting legal entities or brand impersonation were observed, so the elevated risk rests on the threat detections and behavioural findings rather than on identity contradictions. Evidence:

• Homepage: external threat detections span multiple major security engines, and a confirmed blacklist classification applies to the domain.
• Homepage sandbox runs (three successful runs, stable HTTP 200 responses): behaviour was classified as malware execution, while no external requests or wallet or form-based data capture were observed.
• Domain registration: created 2026-08-11 (~0.21 years, about 75 days old), expiring 2027-08-11, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED.

Regulatory Verification Notes

The captured homepage does not establish who operates the service, under what legal entity, or under which financial authorization. Neither a licence nor a registration reference is evident. For a site offering trading and earning, that is a disclosure gap. On its own it is a verification matter, not proof of fraud. Here it compounds the threat findings rather than standing alone. The registrant details are also hidden or incomplete, so ownership cannot be tied to any named party, and the real-world identity behind the service remains unverified. No third-party broker or regulatory-database match was found for the name, so there is no external reputational context either way. The domain-validated certificate shows only that the domain holder controlled the domain when it was issued. It says nothing about the operator's legitimacy. Evidence:

• Homepage: the short page text under the "Trade | Hold | Earn" title names no operator, licence or authorization.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2027-01-07 (73 days remaining).

What to Verify Next

Any claim of authorization to offer trading or yield services should be checked directly against the relevant financial regulator's public register, using the operator's own name rather than a link from this site. Any official channels the service claims should be confirmed through an independent route, such as the project's or company's established public presence. The reputation status of the domain should be rechecked with public security reputation services before any later reconsideration. A clean result would still not establish the operator's identity. Evidence:

• Homepage: the trading and earning proposition describes activities that normally require a checkable authorization.
• Threat status: the current detections are the main reason to reassess before any engagement.

Summary Verdict

The overall posture is critical and clearly cautionary. Corroborated threat detections and adverse behavioural findings dominate the assessment, and the site's technical hygiene does not offset them. Legitimacy cannot be inferred, and the operator remains unidentified.

Infrastructure Integrity

The site sits behind a Cloudflare CDN/WAF, and every observed address is a CDN edge node. The origin server was not observable. This is a mitigating factor only: it indicates mainstream hosting and a valid certificate chain, but it does not reduce the reputational risk. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content swaps.

Closing Assessment

The site should not be used for login, credential entry, payments, deposits or wallet connection, and nothing should be downloaded from it. At most, it should be viewed read-only from an isolated, non-sensitive environment. Anyone who has already interacted with it should change any reused passwords and review related accounts and wallet approvals.