Is kinetiq-shareholders.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presents itself as a "Pre-Trial Claims Portal" described as an official notice delivery service for the State of New York. Its single page says it delivers pre-trial claim notices on behalf of a named rights holder, Sony Music Entertainment. Each notice is said to be reachable only through a private link sent to the respondent. The page tells recipients to record a response within a fixed window before the matter is "referred for court processing". No fee is shown, and the page gives no explanation of how the operator would benefit. In substance it is a legal-notice lure built to pressure recipients into acting on an unverifiable authority claim.

Scam/Impersonation Risk

This is a clearly cautionary case. Third-party reputation sources currently flag the domain, and more than one detection is recorded, so the domain is blacklisted by those sources. That reputation signal converges with what the page itself shows. The homepage invokes a court-style process and a deadline, and the claimant's entity name is malformed. It gives no court, case reference, legal identity, postal address or contact channel. The appeal instruction is incoherent and refers to an unspecified "account". The text also contradicts itself: it says the portal never asks for passwords, codes or payment, and then breaks off mid-sentence into an appeal instruction. Pairing a named, well-known rights holder with an unverifiable "official" process, a response window and a private link matches the pattern of a pretext used to push recipients toward a follow-on action. The page does not itself ask for credentials or payment, and the sandbox saw no external network activity, hidden forms or wallet interaction. The risk therefore lies in the lure and in whatever the private notification link leads to. Brand impersonation was not formally confirmed, and no conflicting legal entities appear. The reputation hits and the unverifiable authority claims are sufficient on their own to treat the site as high risk. Evidence:

• Homepage: presents an "Official Notice Delivery Service" for the State of New York and names Sony Music Entertainment as claimant, but with a malformed entity name and no verifiable court or case reference.
• Homepage: the deadline-driven response window, the "private link" mechanism and the incoherent appeal instruction that mentions an account are consistent with a pressure lure.
• Domain registered 2026-09-26 (~23 days old); the archive holds only 2 snapshots, both captured on 2026-09-27.
• Third-party reputation sources currently flag the domain: three malicious and one suspicious verdict, including from a tier-one security vendor.

Regulatory Verification Notes

The page makes high-stakes legal claims but discloses nothing that can be checked. It names no court, issuing authority, attorney, law firm or legal entity. It gives no case number, registered address or published contact route, and it shows no licence or registration. These are verification gaps in their own right, and they are made more serious by the site's claim to carry out a judicial or quasi-judicial function. The operator's real-world identity is unverified, and nothing on the site connects it to the rights holder it names. No third-party broker or regulatory record matched this domain. The site's own claims should therefore be treated as unsubstantiated assertions, not as evidence of authority. Evidence:

• Homepage: no legal entity, address, case reference, attorney or court is identified anywhere on the page.
• Registered through NICENIC International Group Co., Limited, with expiry set for 2027-09-26.
• TLS certificate is domain-validated only, issued by YE1 and valid to 2026-12-25. This confirms encryption and says nothing about the operator's identity.
• Served from AS13335 (Cloudflare, US).

What to Verify Next

Anyone who received a message pointing to this portal should not open the private link or respond through the site. Authenticity should be tested independently of the site. The claimed claimant's legal department or official website, found through an independent search, can confirm whether any such claim exists. Any court reference should be checked directly with the relevant New York court clerk's office. The sender of the original notification message should also be checked against channels known to be genuine. Organisations should pass the domain and the notification message to their security team and block the domain at the email and web gateway. Evidence:

• Homepage: no case number or court is stated, so a registry or clerk check has nothing to match against.
• Homepage: the notice is described as retrievable only through a link in a notification message, so the message headers and sender are the key artefacts to examine.
• Domain registered 2026-09-26, so any claim of an established legal process attached to it deserves independent confirmation.

Summary Verdict

The site is assessed as critical risk. Confirmed third-party reputation hits converge with page content that cannot be verified and relies on pressure tactics, and no positive evidence offsets them. It should be treated as a probable legal-notice lure, not a legitimate claims service. The operator's identity is unverified, and the evidence supports neither engagement nor trust.

Infrastructure Integrity

The domain resolves entirely to Cloudflare edge addresses in the United States, and the underlying origin server is not observable. Cloudflare is a mainstream CDN and WAF provider, and its reputation is clean in its own right. That reflects only the hosting layer. Anyone can place a site behind this protection, so it is a minor mitigating factor and does not offset the reputation and content risks. The site's transport encryption is valid, which is a baseline hygiene signal and not evidence of legitimacy.

Closing Assessment

The site should be used, if at all, only for passive reading from an isolated environment. No private link associated with it should be opened. No credentials, verification codes, personal data or payments should be submitted. The domain should be reported to the organisation's security team, and any related message should be quarantined.