Is resumption-neutrl.finance a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly registered website on a ".finance" domain. Automated capture of its homepage returned no site content. It returned a security-challenge interstitial headed with a suspected-phishing warning, so the site's products, operator and business model could not be observed. Its apparent finance-themed positioning is unsupported by any visible content.

Scam/Impersonation Risk

Contradictory signals are present, and they drive a clearly cautionary assessment. The domain is blacklisted by external reputation sources: one security vendor rates it malicious and several others rate it suspicious. The homepage capture was intercepted by a challenge page that itself carried a suspected-phishing title and returned a forbidden response. This is consistent with the external detections, though the available data does not specify what content is being flagged. The domain is only a few months old, and its sandboxed behavior was erratic. Pages produced repeated script errors and large, rapid page-structure changes after interaction. Outbound traffic to third parties was heavy. Much of that traffic went to recognised, whitelisted destinations, and the sandbox saw no wallet-connection attempts, clipboard manipulation, hidden forms, or credential posts to external hosts. These absences are mildly mitigating but do not offset the blacklist. No conflicting legal identities or confirmed brand impersonation were observed. The risk therefore rests on the reputation detections combined with the domain's newness. Evidence:

• Homepage: the capture returned a forbidden response and a challenge page titled as a suspected-phishing warning, with only a short amount of text.
• Domain provenance: registered 2026-08-13 (~0.2 years old, about 74 days), expiring 2027-08-13, so the domain has no track record.
• External reputation: 1 vendor flagged the domain as malicious and 3 as suspicious; the major browser safe-browsing list had not flagged it.
• Behavioral sandbox: 25 console errors, 64 external fetch/XHR requests and 9 external POSTs, none to non-whitelisted destinations; 3 of 3 runs completed.

Regulatory Verification Notes

No licensing, registration or legal-entity information could be assessed, because the only content captured was the challenge interstitial. Registration details show the domain was registered through NICENIC International Group Co., Limited. Ownership details are incomplete, which is ownership opacity and not an identity contradiction. The real-world operator is not independently connected to any brand or person. No third-party broker or regulatory-database record matched this site. The site's financial-sounding ".finance" label should not be read as implying any regulated status. Evidence:

• Registration: registrar NICENIC International Group Co., Limited; registrant details incomplete.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-09. A domain-validated certificate confirms control of the domain, not the operator's identity.
• No regulator or broker-database match was found for the domain.

What to Verify Next

Any claim that the site is affiliated with a known financial or crypto brand should be checked against that brand's official channels, reached through an independently sourced address and not through links on this site. Anyone who has already interacted with it should check wallet approvals and account activity. Official contact channels should be confirmed offline before any engagement. Re-assessment is worthwhile once the external detections are cleared and the site serves viewable content, because the current evidence cannot distinguish a malicious site from a misclassified new one. Evidence:

• The homepage returned a phishing-warning interstitial in place of content, so no claims could be checked against it.
• The external detections are currently active and unspecified as to the flagged content.
• Domain registration is under three months old, so no operating history can be cross-checked.

Summary Verdict

The overall posture is high-risk. Active external blacklisting, a very young domain and the absence of any verifiable site content or operator identity converge on an assessment that is cautionary and security-forward. The site's valid certificate and established hosting do not change this posture.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers, so the origin server could not be seen. The provider is reputable and bot-protection was active, which mitigates technical exposure. It cannot confirm hosting independently, and it does not offset the reputation detections or establish legitimacy.

Closing Assessment

The site should not be used for login, credential entry, wallet interaction or any payment or financial activity, and nothing should be downloaded from it. At most, passive viewing from an isolated environment is reasonable until the external detections are resolved and the operator's identity is independently established.