Is gage.lat a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Gage is a newly launched decentralized-finance style website. Its homepage is titled "Get USDG Against Stocks | Deposit & Lend USDG | Gage" and presents a service for depositing and lending the USDG stablecoin against stock-linked collateral. Its apparent purpose is to attract users to supply or borrow digital-asset value through an online lending interface.

Scam/Impersonation Risk

The evidence shows confirmed contradictions and a clearly elevated risk posture. The domain is on a blacklist: a substantial number of independent security engines currently classify it as malicious, including more than one top-tier vendor. This corroborated external detection is the decisive factor and outweighs every technical positive. The homepage promotes a financial-custody proposition, depositing and lending a stablecoin against stocks. That puts users' funds directly at stake, so a malicious classification on a site of this type is especially serious. Behavioral testing of the homepage showed heavy outbound activity. Roughly sixty background requests and six data submissions went to third-party destinations outside the site's own infrastructure, and none of those destinations were recognized as established services. External traffic reached a very high share of total activity at peak. No wallet-connection prompt, clipboard manipulation, hidden form, credential-capturing external form, or content cloaking was observed. These absences do not offset the blacklist, but they mean the harm mechanism is unconfirmed. A small number of abuse reports exist on one of the site's network addresses. They belong to a shared content-delivery address used by many unrelated sites and are discounted, so they are not attributed to this site. No conflicting legal identities were found.

Regulatory Verification Notes

The evidence does not establish that the site operates under any financial license or registration. On-page disclosure could not be confirmed, and no regulated-entity status was identified. The site's connection to any real-world lending operator is therefore unverified, and no evidence-based claim of legitimacy can be made. The domain is registered through PublicDomainRegistry.com in the name of a single individual, with no organization listed. That is not itself a violation, but it provides no corporate accountability for a service offering lending against stock-linked assets. The broker-reputation dataset returned no match for this site. That is neutral context and neither clears nor condemns it. The valid TLS certificate is a basic domain-validated credential. It confirms encrypted transport only and says nothing about the operator's integrity.

What to Verify Next

The first step is to determine independently whether a genuine Gage lending protocol exists. That means checking its officially published domain through established, independent sources rather than through links on this site or in unsolicited messages. Next, any claim of authorization to offer lending or stock-linked products should be checked directly with the relevant financial regulator's public registry. The destinations receiving the site's outbound data submissions should be reviewed by a security team before any engagement. The domain's detection status should also be rechecked after a reasonable interval to see whether the listing is cleared. The official support and contact channels should be confirmed offline.

Summary Verdict

The overall posture is high-risk. Corroborated external malicious classifications dominate the assessment, and the site's very recent appearance and unverified operator leave no independent evidence to counterbalance them. The site should be treated as a hazardous destination for any interaction involving credentials, wallets, or funds.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node, so the origin server is not independently observable. This is a mitigating factor only. It offers some protection against direct network attacks, but it also prevents independent hosting verification and can mask rapid content changes. It cannot offset the reputation risk. An unconfirmed pattern of a young domain with sparse subdomains is consistent with a recent deployment, but it is a heuristic and not a finding.

Closing Assessment

Interaction beyond passive viewing is not advisable. No credentials should be entered, no wallet connected, and no funds deposited or lent, and nothing should be downloaded from the site. Any assessment should be conducted from an isolated environment, and the site should be reconsidered only if the detections are demonstrably cleared and its operator is independently verified.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2606:4700:3036::6815:409b (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.