Is rangmore.com a scam? TrustSniffer's high-risk assessment: 23/100

Overview

This website presents only a minimal landing page to a visitor. It is a Cloudflare bot-verification interstitial titled "Cloudflare Registrar", with very little visible text and no product, service, pricing or company description. Its commercial purpose and business model cannot be determined from what the page shows, and the domain's real-world operator is not independently established.

Scam/Impersonation Risk

The assessment is clearly cautionary. A third-party threat-intelligence source has blacklisted the domain. Reputation scanning also returned one malicious and two suspicious detections, so the listing is not a one-off. The homepage reuses the "Cloudflare Registrar" title while the visible content is only a challenge screen. That mismatch is a risk factor, because branding that implies a well-known provider is not matched by any identifiable operator or substantive content. No conflicting legal-entity names were found, and the evidence does not show a confirmed phishing kit or a wallet-drainer. Behavioural testing found no wallet-connection attempts, clipboard manipulation, hidden forms or credential posts to external hosts. The page did change heavily once interaction began, with a large volume of DOM mutations. It also made a high share of its requests to external hosts, all to recognised destinations. These patterns show a dynamic page whose true content sits behind the challenge, and they do not offset the blacklist. Evidence:

• Homepage: the visible content is a bot-challenge screen carrying a registrar-branded title, with no identifiable operator.
• Domain provenance: the current registration dates from 12 September 2026 (~0.11 years old, about 39 days), while archive records show only 3 snapshots spanning 2021–2025 (5 years tracked, ~0.6 snapshots per year). That points to a recently re-registered or restarted domain, and the thin archive history cannot confirm a continuous legitimate use.
• Homepage behaviour: across 3 sandbox runs, 114 external XHR/fetch requests and 6 external POSTs were observed, all to whitelisted destinations. DOM mutations reached 4,031 after interaction.
• External reputation: an external blacklist hit is recorded, and one security engine rated the domain malicious and two suspicious.

Regulatory Verification Notes

No legal, terms, privacy or about content could be assessed. The only page content available was the challenge screen, so no company name, registration number, licence or jurisdiction was observable on the site. No third-party broker or regulatory-database record matched the domain, so there is no external confirmation of regulated status either. The absence of licensing information is a verification gap and is not by itself evidence of wrongdoing. Here it adds to the reputational concern rather than standing alone. TLS and registrar details are administrative facts and are not evidence of legitimacy. Evidence:

• Transport encryption: the TLS certificate was issued by WE1 at DV level, valid to 2026-12-11 (50 days remaining). DV validation confirms control of the domain only and says nothing about the operator.
• Registration: the registrar is Cloudflare, Inc., and the registration runs to 2027-09-12.
• Hosting: the site is served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Homepage: it shows no legal entity, licence reference or regulator disclosure.

What to Verify Next

Any dealings should be preceded by independent checks through channels not supplied by the site itself. These should confirm which organisation, if any, operates the domain, and whether it holds a licence in the relevant jurisdiction, checked directly with the competent registry. Official support or contact channels should be confirmed through a separate, offline route. The domain's registration history should also be reviewed against the 2021 archive captures to establish who held it before the current registration. Until the blacklist listing is resolved, the site should be used for passive viewing at most. Evidence:

• Homepage: it names no operator, so entity checks must start from independent sources.
• Registration timeline: the 2026 registration contrasts with archive captures from 2021, which justifies a historical ownership review.
• Reputation: the external blacklist listing and the malicious and suspicious detections should be rechecked for delisting before any engagement.

Summary Verdict

The overall posture is high risk. A confirmed external blacklist listing, a very recent registration, and the absence of any verifiable operator or substantive content outweigh the site's technically sound security setup. Legitimacy is not established, and the evidence supports treating the domain as unsafe for sensitive interactions.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF, and all four observed IP addresses are Cloudflare edge servers. The origin server is not visible. The bot-protection layer is a mitigating factor for availability and abuse resistance. However, edge-only visibility means hosting cannot be independently verified and content could be swapped quickly. The protections therefore do not offset the reputational risk.

Closing Assessment

Passive, read-only viewing is the only proportionate use at present. Logging in, entering credentials, making payments and sharing personal or financial information should be avoided unless the domain is delisted and the operator is independently verified.