Is gmebull.info a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly established website titled "GME BULL," served from the root of a .info domain as a single landing page with a substantial body of text. The available evidence does not establish a specific product, service, or business model, so its purpose cannot be determined beyond its branding. The page does not connect itself to any independently identifiable company or person.

Scam/Impersonation Risk

This site shows confirmed contradictory signals. Several independent threat-intelligence sources currently flag the domain as malicious, with further engines marking it suspicious, and at least one major security vendor is among the detections. Together these amount to a confirmed blacklist-level reputation problem. The domain is also only a few months old and has almost no historical footprint, so there is no record of benign operation to weigh against the detections. Taken together, the pattern is consistent with a recently stood-up domain being used for abusive purposes. The evidence does not show brand impersonation or conflicting legal identities. No attribution to a named operator is possible, and the detections should be treated as the decisive factor. Automated behavioral testing found no third-party data exfiltration, wallet prompts, hidden forms, clipboard manipulation, or content cloaking. These observations are mildly mitigating, but they do not offset external detections, because malicious behavior can be introduced or swapped in after a clean observation. Evidence:

• Homepage and domain reputation: multiple threat-intelligence engines classify the domain as malicious, with additional suspicious verdicts, and the domain is confirmed as blacklisted.
• Domain registration: created 2026-07-22 (~0.27 years old, roughly three months).
• Web-archive depth: one snapshot, captured 2026-07-26, spanning a single year with no earlier history.
• Homepage behavior: three successful test sessions showed no external network calls, wallet-connection attempts, or hidden credential forms.

Regulatory Verification Notes

No licensing, registration, or regulatory standing can be associated with this site. The real-world operator is not independently connected to it, and ownership shows opacity. That opacity is an administrative limitation, not an identity contradiction. No third-party broker or regulatory-database match exists for the site, so no reputational signal arises from that channel. The regulatory gap is secondary here, because the confirmed threat detections already dominate the assessment. The site's use of a valid but entry-level certificate and a mainstream registrar shows only baseline technical hygiene. Both are easily obtained by any new registrant and do not indicate legitimacy. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with a one-year registration term expiring 2027-07-22.
• Hosting and transport: served from AS13335 (Cloudflare, US); TLS certificate issued by WE1 (DV) and valid to 2026-12-18.
• Identity: no real-world brand or individual could be independently linked to the domain.

What to Verify Next

Before any engagement, confirm through independent channels whether any organization actually claims "GME BULL" as its own, such as a registered business or a known social or financial presence. Treat any claimed affiliation with a recognized brand or market ticker as unverified until it is confirmed offline through that brand's official channels. Re-check the domain against current threat-intelligence listings periodically. A delisting after a documented clean-up would materially change the picture, whereas continued or growing detections would confirm the adverse reading. Evidence:

• Homepage runtime behavior: six browser console errors were recorded, and the page restructured heavily after interaction, with over a thousand DOM mutations in a single session. This is worth re-testing for changes in content over time.
• Domain footprint: the domain sits on an uncommon top-level domain and has no established history to corroborate any claimed operator.

Summary Verdict

The site presents an elevated, clearly adverse trust posture, driven decisively by confirmed external threat detections on a very young domain with no corroborating history or verifiable operator. Technical hygiene and quiet observed behavior are insufficient to counter that reputation evidence, and the site cannot be treated as a safe or legitimate destination on the present record.

Infrastructure Integrity

The site sits behind a mainstream CDN/WAF, and all observed addresses are edge nodes, so the origin server cannot be independently located. This protection reduces direct exposure of the backend, but it also prevents independent verification of where the content is actually hosted and can mask rapid content changes. It is a mitigating factor only and cannot compensate for the reputation findings.

Closing Assessment

Interaction should be limited, at most, to passive viewing. Account logins, credential entry, and any financial or payment activity should be avoided entirely until the threat listings are resolved and an accountable operator is independently identified.