Is embercurve.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

FASTPANEL is a newly registered web property on the embercurve.app domain. Its homepage is a minimal landing page with only a short block of text. It names no company, product line, or service offering, so its business purpose and model cannot be established from the content.

Scam/Impersonation Risk

Multiple independent reputation sources currently flag the domain as malicious or suspicious. These include a tier-one security vendor, and the detections amount to a confirmed blacklist listing. This is the decisive contradiction in the assessment and the main reason for a cautionary posture. No conflicting legal entities and no brand impersonation were observed on the pages captured. The risk therefore comes from the external threat listings and not from on-page identity claims. The behavioral profile adds to the concern but does not confirm it. During the homepage sandbox runs, nearly all network activity went to external destinations, with dozens of cross-origin data requests and background POST submissions. A small number of those destinations were outside the commonly recognised set. The sandbox found no wallet-connection prompts, drainer behavior, clipboard manipulation, hidden forms, external password forms, or content cloaking. Those absences are not enough to offset the external listings. Evidence:

• Homepage: the page carries a "FASTPANEL" title and very little visible text, with no stated operator or service description.
• External reputation: 5 engines rated the domain malicious and 2 suspicious, and the domain appears on external blacklists.
• Homepage sandbox behavior: 36 external XHR/fetch requests and 24 external POSTs across 3 successful runs, with up to 99.3% of observed traffic external and 3 non-whitelisted destinations.
• Domain provenance: registered 2026-09-12 (about 0.11 years old). The web archive holds 1 snapshot, dated 2026-09-13, so the site has no meaningful history.

Regulatory Verification Notes

The captured page discloses no operating company, licence, registration number, or governance information. Real-world operator identity is therefore unverified, and the domain's registration details are incomplete. That alone is an administrative gap and not proof of wrongdoing. The same gap now sits beside confirmed threat listings, so there is no established identity or regulatory standing that could counterbalance them. No third-party broker or regulatory record matched this domain. A valid certificate is the only conventional trust marker present, and it carries little weight, since a basic domain-validated certificate proves control of the domain and says nothing about its operator. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED. Created 2026-09-12, expires 2027-09-12.
• TLS: certificate issued by YE2 (DV), valid to 2026-12-11, with 50 days remaining.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Homepage: no legal-entity name, licence reference, or regulator mention.

What to Verify Next

Before any engagement, establish how the link to this domain was received. Treat an unsolicited message, advertisement, or redirect as a red flag in its own right. Anyone claiming to represent a service on this domain should confirm that relationship through an independent, offline route, not through anything displayed on the site. Anyone who still needs the site should re-check the domain's external threat listings for delisting before relying on it. Official support channels should also be confirmed from a source other than this site. Any claimed licence or registration should be checked directly with the relevant registry once an operating entity is named. Evidence:

• Homepage: no named operator or service against which a licence or relationship could be checked.
• Domain age: the domain is only weeks old, so no long-standing reputation exists to rely on.
• External reputation: the threat listings are current and may change on re-evaluation.

Summary Verdict

The assessment is critical and clearly cautionary. Confirmed external threat detections on a very recently created domain with no verifiable operator, no history, and no substantive content outweigh the technical hygiene signals present. The evidence supports treating the site as high-risk for any sensitive interaction. The objective evidence does not establish the site's purpose or intent.

Infrastructure Integrity

The site is fronted by Cloudflare. All four observed addresses are edge servers in that network, and the origin server was not observable. The certificate is valid and issued by a recognised authority. These are mitigating factors only. Edge-only visibility prevents independent verification of the true hosting location. It also lets content change quickly without any visible change in infrastructure. The protections cannot offset the reputational risk.

Closing Assessment

Interaction should be limited to passive viewing, if it occurs at all. Logging in, entering credentials, connecting a wallet, or making any payment or financial commitment on this domain is not appropriate while the current threat listings stand.