Is Dbgksdh03nc a scam? TrustSniffer's high-risk assessment of dbgksdh03nc.com: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

dbgksdh03nc.com is a recently registered website on a random-looking alphanumeric domain. It presents no readable brand, products or business model to a visitor. Automated visits received a short security interstitial titled as a suspected-phishing warning instead of ordinary content, so the site's apparent purpose cannot be established from what it displays. Its apparent role is therefore a low-content or gated landing point, consistent with a throwaway domain.

Scam/Impersonation Risk

Contradictory signals are present and severe. The domain is blacklisted by multiple independent reputation sources. A substantial number of security engines classify it as malicious, including several tier-one vendors, and the evidence points to a phishing designation. The page that loaded carried a suspected-phishing warning title, which corroborates the reputation findings. Together with the domain's very recent registration and almost no archive history, this makes a genuine, established operator unlikely and an abusive or disposable deployment the more probable reading. No conflicting legal identities or brand-impersonation targets were identified, because no brand content was visible. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms or credential posts to outside destinations. These results do not offset the confirmed threat detections. The site makes heavy use of third-party requests, and its pages produced a high volume of script errors, which fits a hastily assembled or redirecting page. Evidence:

• Homepage capture: the retrieved page was a 403 interstitial titled as a suspected-phishing warning, with only a short block of text.
• Domain registered 2026 (about 3 months old, created 2026-07-19), with a single web-archive snapshot spanning 2026–2026 (1 year tracked, first and last seen 2026-08-04).
• Behavioural runs (3 of 3 completed): 35 outbound background requests and 9 outbound form or data posts, none to non-whitelisted destinations, and 34 console errors. No wallet, clipboard or hidden-form activity was detected.
• Reputation checks: multiple independent sources return malicious verdicts, and tier-one security vendors are among the flagging parties.

Regulatory Verification Notes

The evidence contains no licence, registration number or operator identity. No legal, terms or about page was available to assess. No regulatory registration could be matched to the domain, and no third-party broker-database record exists. The absence of such records is a verification gap and is not itself evidence of wrongdoing. The decisive concern is the confirmed threat reputation, which regulatory standing could not offset. The technical profile shows a valid certificate and an identifiable network operator, but these are baseline hygiene that abusive domains also routinely obtain, and they do not establish identity or legitimacy. The registrar is Internet Domain Service BS Corp., and the registration runs to mid-2027. Evidence:

• Registrar: Internet Domain Service BS Corp.; registration expires 2027-07-19.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• TLS: certificate issued by WE1 with domain-validation (DV) only, valid to 2026-12-15 (about 47 days remaining). A DV certificate confirms control of the domain and does not confirm who operates it.
• No licensing or registration disclosures were identifiable for the site, and no broker-database match exists.

What to Verify Next

The site should not be treated as a counterparty. If it was reached through an email, message, advertisement or QR code, trace that link to its origin and confirm through an independent, offline channel whether the sender actually uses this domain. Any claimed organisation should be located through its officially published channels, not through this site. If the link was received as an invitation to log in, pay or connect a wallet, report it to the sender's genuine organisation and to the relevant anti-phishing reporting service. Anyone who has already entered credentials or made a payment should change those credentials and notify their bank or provider immediately. Before any future re-evaluation, a security vendor should reassess the domain, and only after the detections have been formally withdrawn. Evidence:

• The suspected-phishing interstitial on the homepage indicates the destination is already flagged at the infrastructure level.
• Multiple independent reputation sources currently list the domain as malicious.
• The domain's creation about three months ago leaves no long-standing history to support continued use.

Summary Verdict

The available evidence supports a high-risk posture. Confirmed adverse reputation, phishing designation and a young, thinly documented domain converge on a site that should be regarded as hostile until proven otherwise. The technical hygiene signals are real but do not alter that posture.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed address is a shared edge address in the United States. The origin server is not visible. That protection is a mitigating factor only. It reduces exposure to automated attack, but it also prevents independent verification of where the content is hosted, so content could change quickly behind the edge. The bot-protection behaviour seen during testing reflects this layer, not any cloaking by the site. Protective infrastructure cannot offset the external threat detections.

Closing Assessment

Do not log in, enter credentials, make payments or connect any wallet on this domain, and do not download anything from it. Treat any message or advertisement directing a person here as suspicious and route it to the appropriate security or fraud-reporting channel.