---
title: "Is icmd77.top a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "icmd77.top"
verdict: "Critical Risk"
title: "Is icmd77.top a Scam? Risk Report, Score 5/100"
trust_score: 5
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/icmd77.top
assessed: 2026-10-25
---

# Is icmd77.top a scam? TrustSniffer's high-risk assessment: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** icmd77.top shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-25 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 16 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 12 months old (Most scam domains are under a year old) | Watch |
| Certificate | Encrypted connection (Issued by YE2) | Noted |
| Hosted by | AlexHost (Server in RO) | Noted |

## The page as captured


![Screenshot of the icmd77.top homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/icmd77.top/screenshots/first.png)

_What icmd77.top served when TrustSniffer captured it on 2026-10-25. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, English-language travel site on a low-cost ".top" domain. Its homepage carries a short editorial piece titled "Travel: where to stay in Paris". It presents itself as a lightweight travel-advice page and shows no storefront, account area, or product catalogue. Its commercial purpose is not stated on the page.


### Scam/Impersonation Risk

The page contains hard contradictions. Several major security vendors currently flag the domain as malicious, and a broader set of detection engines independently agrees. Combined, these amount to a confirmed **blacklist** condition. A travel-advice page is a typical low-suspicion front. Such pages are often used to host redirects, payload delivery, or lure content that differs by visitor or over time, so the benign homepage text does not offset the reputation findings. No conflicting legal entities appear on the site, and no brand impersonation was confirmed. The risk therefore comes from the external threat listings, not from identity inconsistency. In controlled sandbox sessions the homepage loaded stably, made no calls to outside domains, showed no hidden forms, wallet prompts, or clipboard manipulation, and did not alter its content after interaction. That is a mitigating observation about the page as captured, but it does not cancel the active listings. The listings are the decisive signal. Evidence:

- Homepage and domain reputation: three tier-one security vendors flag the domain as malicious. In total, 16 detection engines return malicious verdicts and 2 return suspicious verdicts.
- Homepage behaviour: three sandbox runs all returned HTTP 200 with zero external requests, zero console errors, and no cloaking.
- Domain provenance: registered 2025-11-03 (~1 year old), so the domain has no long track record to counterbalance the detections.

### Regulatory Verification Notes

The captured homepage is brief and discloses no operator, company name, licence, or registration number. The domain's registration details are also incomplete, which is consistent with ownership opacity. Because of this, the real-world operator cannot be independently tied to the site, and none of the site's claims can be treated as verified. No third-party broker or regulator profile matched this domain. The absence of licensing information is a transparency gap, not evidence of fraud on its own. It matters here only because the reputation findings above already point to elevated risk. Evidence:

- Homepage: roughly 435 characters of text, with no legal entity, address, or licence reference.
- Registration: registrar is NICENIC International Group Co., Limited. The domain expires 2026-11-03, and ownership details are incomplete.
- Hosting and encryption: served from AS200019 (AlexHost, Romania). The TLS certificate is DV-level, issued by YE2 and valid to 2027-01-06. This confirms an encrypted connection, not operator identity.

### What to Verify Next

Before any engagement, the listing status should be rechecked with the flagging security vendors, and the owner of the domain should be asked for a clean-up or false-positive confirmation. If the domain is reached through a partner, referral, or email, that source should be confirmed through an independent, offline channel. Any claim that the site belongs to a known travel or hospitality business should be confirmed on that business's own official website, reached by manual navigation, not through links on this page. Any official support or contact channels should also be confirmed independently. Evidence:

- Reputation: the current malicious verdicts are the key item to recheck, and they should be tracked until they are delisted.
- Homepage: it names no operator or affiliation that could be cross-checked.
- Domain: the registration is under one year old, so no long-term ownership record exists to consult.

### Summary Verdict

Available evidence supports an elevated-risk, clearly cautionary posture. Active, multi-vendor malicious listings override the technically clean sandbox behaviour and the valid encryption certificate. The operator's identity remains unverified, so no legitimacy conclusion can be drawn.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and the only observed address is a CDN edge address. The true origin server is not visible. This is a mitigating factor only. It provides transport and availability protection, but it limits independent hosting verification and can mask rapid content swaps. It does not offset the external threat detections.


### Closing Assessment

The site should be treated as read-only at most, and preferably avoided. Do not log in, enter credentials, make payments, or download files from it until the security listings are cleared and the operator is independently verified. Anyone who has already interacted with it should scan their device and rotate any credentials they entered.


_Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of icmd77.top.

- The request stayed on icmd77.top. It was not redirected to another domain. (Clear)
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2026-11-03. (Noted)
- It is hosted on AlexHost, from a server in RO. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
| Hosting | AlexHost - ALEXHOST S.R.L., MD |
| Country | RO |
| Server IP | 80.96.112.88 |
| Name servers | coen.ns.cloudflare.com, tia.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 1 |
| Edge IP addresses | 1 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-06 |
| Domain age | 0.98 years (continuous registration) |
| Domain expiry | 2026-11-03 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 16 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about icmd77.top at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [gunceladres2026.top](https://trustsniffer.com/report/gunceladres2026.top), also hosted by AlexHost (Critical Risk, 17/100)
- [quicktent.org](https://trustsniffer.com/report/quicktent.org), also hosted by AlexHost (Critical Risk, 3/100)
- [globalelitetrade.com](https://trustsniffer.com/report/globalelitetrade.com), also hosted by AlexHost (Critical Risk, 0/100)
- [quicksentind.org](https://trustsniffer.com/report/quicksentind.org), also hosted by AlexHost (Critical Risk, 5/100)
- [oakfiat.org](https://trustsniffer.com/report/oakfiat.org), also hosted by AlexHost (Critical Risk, 0/100)
- [senttobnb.org](https://trustsniffer.com/report/senttobnb.org), also hosted by AlexHost (Critical Risk, 5/100)
- [safemerchant.pro](https://trustsniffer.com/report/safemerchant.pro), also hosted by AlexHost (Critical Risk, 0/100)
- [almal-capital.com](https://trustsniffer.com/report/almal-capital.com), also hosted by AlexHost (Critical Risk, 2/100)
- [prkgilrs-usdt-draner-frant.vercel.app](https://trustsniffer.com/report/prkgilrs-usdt-draner-frant.vercel.app), another site assessed as critical-risk (Critical Risk, 5/100)
- [ketsonsol.com](https://trustsniffer.com/report/ketsonsol.com), another site assessed as critical-risk (Critical Risk, 4/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)
- [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24)
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/icmd77.top) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/icmd77.top · assessed 2026-10-25.*