Is gyroscope-protocol.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Gyroscope Protocol, served from a recently registered ".pro" domain, presents itself as a decentralized exchange for EVM-compatible blockchains. Its homepage title bills it as the "#1 EVM DEX" offering balanced swaps, liquidity pools, staking and an airdrop. The apparent business model is to attract visitors into trading, pooling, staking and token-claim activity under a DeFi-protocol brand.

Scam/Impersonation Risk

This is the decisive section of the assessment. Multiple independent threat-intelligence sources currently flag the domain. Four security engines classify it as malicious and three more as suspicious, and a tier-one network-security vendor is among those flagging it. This amounts to a confirmed blacklist condition. The pattern fits the profile of a newly stood-up DeFi lure. The domain is only months old and has almost no independent history. It carries an unverifiable "#1" superlative and an airdrop offer, a mechanic widely used to draw visitors into approving wallet transactions. No brand-impersonation or conflicting legal-identity finding was recorded, and the automated browsing sessions did not observe wallet-drainer behaviour, clipboard tampering, hidden forms or content cloaking. These clean behavioural results do not offset the active detections. Where a new domain presents a DEX and airdrop interface and is already flagged by several scanners, that interface cannot be treated as a genuine protocol front end. Evidence:

• Domain registered 2026-07-30 (~0.25 years old), so the site is roughly three months old.
• One web-archive snapshot only, captured 2026-07-31, spanning a single year, which gives no prior history to corroborate the brand.
• Homepage title claims "#1 EVM DEX" with swap, pool, stake and airdrop features; no independent evidence of that ranking was found.
• Automated sessions found no wallet-connect prompt, drainer routine or hidden form on the homepage, but about 73% of page activity went to external resources.

Regulatory Verification Notes

The assessment found no regulator, licence or registration reference tying the site to a supervised entity, and no third-party broker-database match. A financial-trading and staking proposition with no visible legal entity, jurisdiction or terms is a material disclosure gap, and here it adds to the reputational findings above. Registration details show incomplete ownership data, so the operator is not independently identified. Identity is unverified, and the site cannot be linked to any real-world person or company. The valid transport encryption is a basic hygiene item, not a trust indicator, because a domain-validated certificate can be obtained by any registrant. Evidence:

• Domain registered through Atak Domain Bilgi Teknolojileri A.Ş., with owner details incomplete in the registration record.
• TLS certificate issued by YR1 at domain-validation (DV) level only, valid to 2027-01-19.
• Hosted on AS59692 (IQWeb FZ-LLC, AE).
• No regulatory-registry match and no broker-database match was found for the domain.

What to Verify Next

Any contact with this site should begin with evidence from outside the site. Check whether a real protocol called Gyroscope exists. Take its official domain, social accounts and contract addresses from an independent source, such as a long-established aggregator or the project's verified community channels, and compare them with this domain. Do not rely on links or addresses published here. Confirm that any claimed smart contracts are published and audited, and that the airdrop and "#1" claims are corroborated elsewhere. Confirm the official support channels through an independent route, and check for an identifiable legal entity and licence with the competent registry. Evidence:

• The homepage's "#1 EVM DEX" and airdrop claims are unsupported by anything else in the assessment.
• The domain is not recognized in the decentralized-finance protocol directory consulted, so no independent protocol record could be matched.
• No operator, entity or jurisdiction could be linked to the site through its registration record.

Summary Verdict

The site is assessed as high-risk. It is a very young, near-undocumented domain whose DeFi-protocol presentation is contradicted by active, convergent threat detections from independent sources. Its identity cannot be tied to any accountable operator. The decisive factor is the external flagging, which no technical hygiene or clean browsing behaviour offsets.

Infrastructure Integrity

The site resolves to a single address at IQWeb FZ-LLC, a data-centre hosting provider in the United Arab Emirates. No CDN or WAF fronts it, so there is no protective layer to mitigate exposure. The five abuse reports on record attach to that shared provider address and not necessarily to this site alone. They remain undiscounted, however, and add to the reputational pressure. Valid encryption and a stable, consistently responsive host show only that the server is operational. They do not offset the detections.

Closing Assessment

The site should not be used for login, wallet connection, credential entry, token approvals or any financial interaction. At most, the site may be viewed passively from an isolated environment. Any organisation or individual who has already connected a wallet, approved a transaction or entered credentials should treat those assets as exposed. They should revoke approvals and rotate credentials immediately.

Signals weighed against the site

• AbuseIPDB: 5 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 10% confidence. The reports are attributed to shared infrastructure, not specifically to this website.