Is lumiadashboard.org a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a recently launched .org property branded as a "dashboard" under the name lumiadashboard. Its captured homepage returns a normal page of a few thousand characters, but the page title reads "Google", a name that has no evident connection to the domain. The visitor is shown a generic web front end whose commercial purpose or business model is not evident from the captured material. No product, service or operator is clearly presented.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. The domain is blacklisted: several security engines, including a top-tier endpoint-security vendor, flag it as malicious. That convergence is a stronger indicator than any single detection. The homepage title mimics a major global search brand while the domain bears no relationship to that brand. This is a brand-lookalike pattern commonly used to borrow credibility, although no formal impersonation finding was recorded and the page analysis could not tie the site to any real-world entity. Behavioural testing also suggested cloaking: the page changed noticeably in appearance after interaction, and three inline scripts were classed as suspicious. Most outbound traffic was directed to third parties. Reputation records also carry a phishing-related marker for the domain. Separately, the shared delivery address the site resolves to has an extensive abuse-report history. Those reports attach to a multi-tenant address, so they cannot be pinned on this site alone, but they have not been discounted and they reinforce the cautionary picture. Together these signals point to a site that should not be trusted with sensitive interaction. Evidence:

• Domain registered 2026-09-08, about 44 days old, so the site has almost no operating history.
• Web archive holds only 3 snapshots, spanning 2026-09-17 to 2026-10-03 (1 year tracked), which is thin and recent.
• Sandbox testing recorded a suspicious cloaking result (visual change of about 12.7% after interaction), 3 suspicious inline scripts, and about 71% of network activity going to external hosts.
• The shared delivery address carries 205 abuse reports from 33 distinct reporters, the latest on 2026-10-22; 5 security engines rated the domain malicious and 1 rated it suspicious.

Regulatory Verification Notes

No licensing, registration or company disclosure could be established on the captured homepage, and the on-page disclosure position is unclear. No operator can be connected to the site. Ownership and governance transparency are limited, which is an administrative opacity finding and not an identity contradiction, because no conflicting legal entities were observed. No third-party broker or regulatory-database record matched this domain, so no external reputational context exists on this point. Nothing here supports treating the site as a regulated or supervised business. The transport-encryption certificate is a basic domain-validated one. It confirms an encrypted connection only and says nothing about who operates the site. Evidence:

• Domain registered through NameCheap, Inc.; the registrant record is incomplete.
• TLS certificate issued by YR1 (DV, domain-validated only), valid to 2026-12-07 with 45 days remaining.
• Site served from AS54113 (FASTLY - Fastly, Inc., US).
• No broker or regulator database match was found for the domain.

What to Verify Next

Any dealing should be preceded by independent confirmation of who operates the site. That means checking whether any company claims it, and whether it holds a licence, through the official registry of the relevant jurisdiction. Official contact channels should be confirmed through an independent, offline route. Any claimed association with the brand named in the page title should be checked against that brand's own official channels. The domain should be re-checked against threat-intelligence sources after any claimed clean-up. Until then, any content from the site should be treated as untrusted. Evidence:

• The homepage returned a normal response with roughly 3,200 characters of text, enough for a manual comparison of its branding claims against official sources.
• In 3 of 3 sandbox runs no wallet-connection prompts, hidden forms or credential forms posting to external hosts were seen, so inspection can be done without submitting any information.

Summary Verdict

The site carries an elevated, high-risk trust posture. Confirmed external threat detections, brand-lookalike presentation and evasive page behaviour outweigh its few technical positives, and the operator's identity is not established. The available evidence does not support treating it as legitimate.

Infrastructure Integrity

The site is delivered through Fastly's CDN/WAF, and all four observed addresses are edge nodes of that provider. The origin server was not observable. Protective edge infrastructure is a mitigating factor only. It cannot offset the reputational and behavioural risks above, and it prevents independent verification of the true hosting location. Two unconfirmed heuristics, fragmented infrastructure and a very young domain with few subdomains, are consistent with the verdict but are not independent risks.

Closing Assessment

The site should not be used for logins, credential entry, payments or any financial interaction, and no files should be downloaded from it. Passive viewing in an isolated environment is the most that is appropriate until the operator's identity is established and the external threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 205 reports on hosting IP 185.199.108.153 (GitHub, Inc., Content Delivery Network), 73% confidence. The reports are attributed to shared infrastructure, not specifically to this website.