Is gme-bull.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site titled "$GME — Diamond Hands on Solana". It presents a meme-style cryptocurrency token theme aimed at retail participants in the Solana ecosystem. Its apparent purpose is to promote a speculative token and draw visitors toward token-related activity. The captured page is short, and its content could not be independently attributed to a verified brand, company, or individual.

Scam/Impersonation Risk

This is a high-risk assessment, driven by confirmed external contradictions rather than by any single on-page claim. The domain is blacklisted. Several major security vendors flag it as malicious, with additional suspicious detections on top, and the flagging is corroborated across more than one reputation source. This is decisive and overrides every mitigating signal. The domain is also very recent, and the web archive holds only a single capture. The site therefore has no history of benign operation. The token-themed branding of the domain and page title fits the pattern of opportunistic crypto promotions that trade on a recognizable meme. That is a contextual observation, not a confirmed impersonation finding, and no conflicting legal identities were observed. The sandbox found no wallet-drainer behavior, clipboard hijacking, hidden forms, or cloaking. It did record heavy third-party network activity: 36 external background requests, 21 of them to non-whitelisted destinations, and 6 external form submissions, one of them to a non-whitelisted destination. Data from any interaction may therefore leave the site's own environment and reach unvetted parties. Evidence:

• Homepage: the domain was registered on 2026-07-21 (~0.27 years old, roughly three months).
• Web archive: 1 snapshot, in 2026, spanning 1 year tracked, so no established history exists.
• Homepage behavior: 36 external XHR/fetch calls (21 non-whitelisted) and 6 external POSTs (1 non-whitelisted) across 3 successful sandbox runs.
• Homepage reputation: 10 malicious and 2 suspicious vendor detections, with blacklist status confirmed from two independent sources.

Regulatory Verification Notes

The captured page gives no verifiable operator identity, so ownership could not be tied to any real-world entity. Ownership opacity applies, and this is a transparency limitation, not an identity contradiction. No regulator or third-party registry source confirms the site, and no broker-reputation record matched it. The homepage content does not clearly present licensing, registration, or legal-entity disclosures. For a token-promotion site that invites financial participation, those disclosures are expected. The valid encryption certificate and the registrar's standing confirm only technical hygiene. They say nothing about the operator's legitimacy. Evidence:

• Transport encryption: the TLS certificate is issued by WE1 (DV, domain-validated only) and is valid to 2026-12-17.
• Domain registration: registered through Global Domain Group LLC, expiring 2027-07-21.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage: no regulatory registration, license number, or legal-entity statement was found in the captured content.

What to Verify Next

Third-party reputation should be re-checked after any remediation, and the project's claimed identity should be confirmed outside the website. Confirm whether the token or project is documented by an independent, established source, such as a recognized blockchain explorer listing or a publicly accountable team. Do not rely on links published on the site itself. Confirm any official contact or social channels through a separate, offline route. Check whether the operator holds a financial or virtual-asset registration with the relevant national authority before any financial interaction is considered. Re-test the domain's external reputation later to see whether the malicious detections have been cleared. Evidence:

• Homepage: the page presents a Solana token theme without naming a team, company, or issuer.
• Web archive: only one capture exists, so there is no prior content to compare against.
• Registration record: the domain's recent creation means no long-term operating history can be cited.

Summary Verdict

The available evidence supports a clearly cautionary, high-risk posture. External threat intelligence is decisive, and the domain's youth and absence of operating history reinforce it. The technical-hygiene positives that were observed do not offset it.

Infrastructure Integrity

The site is served behind Cloudflare's CDN and WAF. All four observed addresses are edge servers, and the origin server was not observable. This protective layer is a mitigating factor only. It cannot offset the external threat detections, and edge-only visibility prevents independent confirmation of where the content is actually hosted. That also leaves room for content to change quickly without notice.

Closing Assessment

Limit any interaction to read-only viewing. Do not log in, connect a wallet, enter credentials, or make any payment or token transaction on this site until its reputation is independently cleared and the operator is credibly identified.