Is deltaliquidlitys.cfd a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly registered website on the .cfd domain extension. Its homepage was captured as an entirely empty document, with no title, visible text, branding, navigation, links, forms, scripts or media. The site presents nothing to a visitor, and its apparent purpose and business model cannot be determined from what it publishes. The name suggests liquidity-related branding, but the site makes no claim, product or service that could be assessed.

Scam/Impersonation Risk

This is the most serious element of the assessment. The domain is on an external blacklist, which is a confirmed contradiction and not merely a soft reputational signal. One major security engine rates it malicious and another rates it suspicious. The listing sits alongside a domain registered only days ago, which is a pattern commonly seen in disposable or short-lived infrastructure. Nothing on the homepage explains or offsets the listing, because the site publishes no content, legal identity, product description or support channel. No brand impersonation, conflicting legal identities or credential-harvesting forms were observed. The risk therefore rests on the blacklist and on the absence of any legitimising context. A blank page on a freshly registered, listed domain can precede a content swap, so the listing carries more weight here than it would on an established site. A domain with this profile is better treated as a threat indicator than as a business. Evidence:

• Domain registration: the domain was registered on 2026-10-09 (~10 days old), through the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Reputation: external threat-intelligence screening produced a blacklist hit, with one engine returning a malicious verdict and one a suspicious verdict.
• Homepage: the captured page was an empty document, so no content could be set against the reputational warning.
• Behavioral testing: three sandbox runs found no impersonation of a known brand and no phishing-style forms.

Regulatory Verification Notes

The site publishes no legal, terms, privacy, about or contact pages. It names no operating company, registration number or licensing authority. Because nothing is published, the absence of a license is a verification gap here and not a regulatory finding in itself. Registration details are incomplete, which amounts to ownership opacity and not an identity contradiction. The real-world operator cannot be connected to any brand or person, and no third-party broker or regulatory record was matched. This is all consistent with an unverified entity. The blacklist signal covered above is what drives the elevated risk, not these disclosure gaps. Evidence:

• Hosting: the site is served from AS13335 (Cloudflare, US).
• Transport encryption: the TLS certificate is a domain-validated (DV) certificate issued by YE2, valid to 2027-01-07. This confirms only encryption and domain control, not who operates the site.
• Domain term: the registration runs for a single year, to 2027-10-09.
• Homepage: it names no company, license or registration number, and no third-party broker record matched the domain.

What to Verify Next

Before any engagement, the operator should be shown to exist independently of this domain. That means obtaining a company name, registration number and any claimed license through an official channel, then confirming each with the relevant corporate registry or financial regulator. Official contact channels should be confirmed by an independent route, such as an offline introduction or a publicly listed number for the named entity. They should not come from this site. The reputational listing should be re-checked after any remediation or content change. Until content appears, there is nothing on the site to validate. Any later content should be reassessed from scratch, because the current blank state says nothing reliable about future behaviour. Evidence:

• Sandbox runs: three of three behavioral runs completed with no external network requests, no forms and no wallet-connection activity.
• Page structure: the homepage exposes no internal or external links to follow for further verification.
• Operator identity: no registry, license or company reference exists on the site to check against.

Summary Verdict

The overall posture is high risk. The confirmed blacklist and a very young, empty, unattributable domain converge on a cautionary conclusion. Technical hygiene on the site is basic and offers no meaningful reassurance. The site is an unverified entity with an adverse reputation signal, and no evidence of legitimate operation.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses, IPv4 and IPv6, are edge servers, and no origin server was observable. This is a mitigating factor only. It shows ordinary use of a mainstream protection layer, but it does not vouch for the operator. It also prevents independent verification of where the content is actually hosted, and it can make rapid content swaps harder to detect. The infrastructure therefore cannot offset the reputational listing.

Closing Assessment

Sign-in, credential entry, wallet connection, payments and any financial interaction with this domain should be avoided. Any visit should be limited to passive viewing from an isolated, non-sensitive environment, and nothing should be downloaded. Organisations should consider blocking the domain or flagging it for monitoring, and should reassess it only if it later publishes verifiable identity and the listing is cleared.