Is ekopellet.net a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "Ekopellet – Polski Pellet," a Polish-language storefront for wood pellet heating fuel. Its homepage is a content-rich page with interactive elements and several password-entry forms, which implies customer accounts or login access. Its apparent purpose is online retail of pellet fuel, though the site's real-world operator has not been independently connected to the brand it displays.

Scam/Impersonation Risk

The evidence shows confirmed contradictions and supports a clearly cautionary posture. The domain is on a confirmed blacklist. A substantial number of independent security engines currently flag it as malicious, including several tier-one security vendors, and a further engine rates it suspicious. This convergence of independent detections is the decisive negative signal. It triggered the external kill-switch that caps the assessment at the lowest level. No identity contradiction, brand impersonation, or conflicting legal entities were observed on the pages analysed, so the risk comes from reputation and behaviour rather than from inconsistent identity claims. Several behavioural observations on the homepage add to the concern. The page generated a high volume of console errors and a very large number of DOM mutations after interaction, so its content changes heavily once a visitor engages with it. It also exposes three password forms. A retail pellet site that is both blacklisted and collecting credentials presents a credible credential-harvesting or compromised-site scenario. On the other side of the ledger, the page made no external requests, showed no wallet or clipboard manipulation, and showed no cloaking. The available evidence does not establish whether the owner is the actor or a victim of compromise. Either way, the site's current state is unsafe for sensitive interaction. The domain's history is also inconsistent: a decade-old archive trace sits against a very recent registration record, which is consistent with a re-registered or repurposed domain rather than continuous operation. Evidence:

• Homepage and reputation: the domain is listed by multiple independent security engines, including three tier-one vendors, and the external blacklist kill-switch is active.
• Homepage behaviour: three password forms, about 30 console errors, and about 1,641 DOM mutations after interaction, with no external network calls observed.
• Domain provenance: the registration record was created on 2026-07-31 (~0.24 years old), yet the web archive holds a single snapshot, dated 2016-06-26 (1 year tracked), so continuity is not established.

Regulatory Verification Notes

The pages analysed give no basis for independently tying the site to a registered business or a named legal operator, and on-page disclosure is unclear. Registration privacy is applied to the domain, and that is treated here only as an administrative detail. For a pellet retailer, the relevant checks are ordinary commercial ones: company registration, tax identification, and consumer-rights information. No financial or investment licensing is implied by the site's content. No third-party broker or regulatory-database entry was matched, so no reputational signal arises from that source. The reputational concern in this report rests entirely on the threat detections already described. Regulatory standing cannot be inferred either way. Evidence:

• Registration: the domain was registered through the corporate registrar Tucows (registrant details redacted for privacy), with an expiry of 2027-07-31.
• Transport security: the TLS certificate was issued by WE1 as domain-validated (DV) only, valid to 2027-01-03 (about 68 days remaining), so it confirms encryption but not the operator's identity.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the retailer's existence should be confirmed through an independent route. This means checking the Polish business registry for a company trading as Ekopellet, matching the name and tax number to any address or phone details shown, and confirming official contact channels offline. The domain's current detection status should be re-checked after a reasonable interval, since a compromise may be cleaned up. The pellet seller's established web presence should also be compared with this domain, to rule out a lookalike registered in 2026 that copies an older business. Evidence:

• Homepage: the page presents a Polish brand name and three password forms, but no independently verifiable operator identity was established.
• Domain history: the recent registration and the lone 2016 archive trace leave open whether the current operator is the original one.

Summary Verdict

The site is rated at the lowest trust level, with a high-severity posture. Confirmed security-industry detections outweigh every mitigating technical signal, and the domain's provenance is classed as failed. Apparent legitimacy cannot be inferred, and the site's real-world identity remains unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, so the origin server is not observable. This prevents independent verification of the true hosting and can mask rapid content swaps. The protection is a mitigating factor only and does not offset the reputation risk. The abuse reports recorded against a Cloudflare address apply to shared provider infrastructure and are discounted, so they are not counted against this site. Heuristic flags for fragmented infrastructure and a young domain with sparse subdomains are unconfirmed and carry little weight.

Closing Assessment

The site should be treated as read-only at most, and ideally avoided. No login details, passwords, payment information, or personal data should be entered, and nothing should be downloaded. Any purchase of pellets should go through a retailer whose identity has been verified through an independent channel. If the site belongs to an organisation the visitor already deals with, that organisation should be informed of the detections so the owner can check for compromise.

Signals weighed against the site

• AbuseIPDB: 10 reports on hosting IP 2a06:98c1:3121::1 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.