Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
hrcke.com shows high-risk / scam indicators.
| What this site appears to be | Login and registration page for HRT SAE, a Chinese-language platform advertising Hong Kong and US stock trading, IPO, OTC trading, lending and 'SAT' strategy tiers. It shows no visible licence, company registration or risk disclosure, and includes embedded Coinbase Wallet connection content. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
This website is a Chinese-language login and registration portal branded "HRT SAE". It presents itself as an online brokerage and lending platform offering Hong Kong and US stock trading, IPO subscriptions, over-the-counter trading, short-term loans, and two tiers of "SAT" and "SAT-VIP" strategy access, with a mobile app download prompt. Its apparent business model is brokerage and lending revenue plus tiered strategy access, but the page does not say how any of this is monetised.
Scam/Impersonation Risk
No formal contradictions were observed. There is no confirmed threat-list entry, no phishing finding, no brand impersonation, and no conflicting legal identities. The risk posture is nonetheless elevated because the site's claims are not backed by evidence. The homepage promises "safe trading", "high growth potential" and flexible "emergency loans", yet gives no verifiable basis for any of them. The "SAT" and "SAT-VIP" strategy tiers are never explained, so what a customer would pay for, and what they would receive, is unclear. The page also embeds Coinbase Wallet and Ledger self-custody connection text on what is presented as a stock brokerage, with no stated relationship between the two. That mix of equity trading, lending and wallet connectivity is incoherent and typical of platforms that move funds opaquely. The login form asks for credentials before any of this is substantiated. The domain was registered only days ago, so there is no operating track record to offset these concerns. One reputation engine has flagged the domain as malicious. Other engines found it clean and the flag is unconfirmed, so it is treated as a soft reputational signal and not a listing. Evidence:
- Homepage and login page: advertise Hong Kong and US stocks, IPO, OTC trading, lending and "SAT"/"SAT-VIP" tiers, with no explanation of strategy content, loan terms or revenue mechanics.
- Login page: carries Coinbase Wallet and Ledger connection content on a brokerage page with no stated relationship, and requests credentials from an unverified financial platform.
- Domain registration: created 2026-10-07 (~12 days old), expiring 2027-10-07.
- Page behaviour: no external network activity, hidden forms or cloaking were observed.
Regulatory Verification Notes
The site discloses no regulatory licence, licence number, company registration number, physical address or contact channel. Its only legal text is a privacy policy link and an anti-money-laundering consent notice beside the login form. For a platform offering securities trading and lending, that is a significant disclosure gap. The gap is a verification shortfall and is not, on its own, proof of misconduct. It does mean no regulated status can be assumed for any of the services offered. Operator identity remains unverified, and ownership opacity applies, so the site's own descriptions should not be read as evidence of who runs it. No third-party broker or regulator record matched this site. Evidence:
- Login page: no licence, registration number, address, contact details or risk disclosure; only privacy and AML-consent links.
- Domain registrar: Dominet (HK) Limited.
- Transport security: TLS certificate issued by WE1 (DV), valid to 2027-01-05; this confirms encryption only, not operator identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
The operator's claim to offer stock trading, IPO subscription and lending should be tested against the official licensing registers of the relevant securities regulators, such as those in Hong Kong and the United States. A licence number and legal entity name should be obtained and matched exactly to those registers. The official support channels, mobile app source and any company address should be confirmed through independent, offline routes and not through links on this page. The relationship between the platform and the Coinbase Wallet and Ledger content should be clarified in writing before any wallet is connected. Independent complaint and reputation sources should be checked for reports from users of this brand. Evidence:
- Login page: no licence number or legal entity named, so none can currently be checked against a register.
- Business description: revenue mechanics, loan terms and "SAT" strategy content are all undisclosed.
- Login page: mobile app download prompt with no named publisher or store listing.
Summary Verdict
The available evidence supports an elevated-risk, cautionary posture. The site pairs a newly created domain with high-stakes financial claims and a credential-collecting login page, and it provides no verifiable substance behind them. It has no confirmed threat listing or impersonation finding. The operator's real-world identity remains unverified, and legitimacy cannot be presumed.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF with a valid TLS certificate, and all observed addresses are edge servers, so the origin host is not visible. This is a mitigating factor against basic hosting abuse and tampering. It does not establish legitimacy, and edge-only visibility prevents independent confirmation of where content is actually hosted. A sparse subdomain footprint on a very young domain is an unconfirmed heuristic and carries little weight.
Closing Assessment
Browsing without interaction is the proportionate use at this stage. Account registration, credential entry, loan applications, deposits and wallet connections should wait until a licence and legal operator have been independently confirmed.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by page content, hosting and network.
01 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The page presents a sign-in form, and the operator behind it could not be independently verified.Page content
rule:PAGE_TYPE_LOGIN_UNVERIFIED
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of hrcke.com.
- The request stayed on hrcke.com. It was not redirected to another domain. Clear
- Registration is published under Dominet (HK) Limited. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-07. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Dominet (HK) Limited |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:4f3f |
| Name servers | ALEXANDRA.NS.CLOUDFLARE.COM, GIANCARLO.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-05 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | 2027-10-07 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about hrcke.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.