Is gunceladres2026.top a scam? TrustSniffer's high-risk assessment: 17/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page crypto trading landing site titled "Trading and Crypto: trading bot", published on a recently created ".top" domain. Its name reads like a "current address" mirror label, though the captured page offers no wording that confirms that purpose. It presents an automated trading-bot and cryptocurrency offering to visitors. Its apparent purpose is to draw users into a crypto trading product or service, but the operator behind it is not identified.

Scam/Impersonation Risk

Contradictory signals are present and substantial. The domain is blacklisted by external threat-intelligence sources, and more than one independent engine rates it malicious while another rates it suspicious. One of those flagging engines is a major, well-regarded security vendor. A separate historical indicator also associates the domain with known phishing activity. No brand impersonation and no conflicting legal identities were observed, so the concern comes from reputation and threat-listing rather than from a copied brand. The page's live behaviour was benign across repeated sessions: there were no outbound third-party requests, wallet-connection prompts, clipboard manipulation, hidden forms, or cloaking. That does not offset the confirmed listings. A site this new can be rotated into harmful use quickly, and a trading-bot and crypto pitch is a common lure for investment and credential fraud. A single abuse report also exists against the shared server address. It reflects shared hosting and is not directly attributable to this site, so it is treated as minor context. No product claims, such as yields, leverage figures or token names, could be extracted from the captured page. Evidence:

• Homepage and domain reputation: the domain is listed by multiple external threat-intelligence sources, including one major security vendor, and carries a historical phishing association.
• Domain registration: registered 2026-08-15 (~0.19 years, about 71 days old) through NICENIC International Group Co., Limited, with a one-year term to 2027-08-15.
• Homepage behaviour: three successful sandbox sessions showed no external requests, wallet interactions or cloaking.
• Hosting address: one abuse report on the shared server IP, attributed to shared infrastructure.

Regulatory Verification Notes

The captured homepage does not establish a clear legal entity, registered business address, or financial-services licence, and ownership of the domain is not transparent. This is ownership opacity, not an identity contradiction, because no competing entity names appear. Real-world operator identity is therefore unverified. Given the trading and crypto positioning, a licence for investment or virtual-asset activity would normally be expected, and none could be confirmed from the site. No third-party broker-review record matched this domain. The sector context makes the absence of disclosure more material here than it would be for a purely informational site. The transport-layer posture is routine and gives no assurance of legitimacy: the certificate is domain-validated only. Evidence:

• Homepage: no clear company name, licence number or regulator reference was established.
• Domain registration: the registration record omits complete owner details.
• Transport encryption: TLS certificate issued by YE1 (DV), valid to 2027-01-05.
• Hosting: served from AS200019 (AlexHost, Romania).

What to Verify Next

Any claim of authorisation to offer trading or crypto services should be checked against the official registers of the relevant financial regulators, using the regulator's own search tool rather than links supplied by the site. Any company name that emerges should be matched to an independent corporate registry entry with a verifiable address. Support and contact channels should be confirmed through an independent, offline route before any engagement. If the site is reached through an advertisement, message or referral, the sender's legitimacy should be confirmed separately. Evidence:

• Homepage: no regulator reference is given that could be checked directly.
• Domain age: the site has a very short operating history, so no long-term track record can be used for corroboration.
• Reputation: the existing threat listings should be rechecked against current threat-intelligence results before any decision is made.

Summary Verdict

The site sits in a clearly elevated-risk posture. Confirmed external threat listings, a very young domain and an unverified operator outweigh the benign page behaviour and valid certificate. The evidence is consistent with a high-risk crypto-trading property that has not earned trust, and the converging signals are strongest on the reputation side.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and the only observed address is a CDN edge address, so the origin server is not visible. This protection is a modest mitigating factor, but it also prevents independent verification of the true host and can mask rapid content changes. It cannot offset the reputation risk established by the external threat detections.

Closing Assessment

The site should be treated as unsuitable for account creation, login, credential entry, wallet connection or any financial transaction. Passive, read-only viewing from an isolated browser is the most that is proportionate, and no files, apps or trading tools should be downloaded from it. Anyone who has already interacted with it should change any reused passwords and review related accounts and wallets.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 81.180.92.199 (AlexHost SRL, Data Center/Web Hosting/Transit), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.