Is scanana.cc a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Scanana is a newly launched website at the scanana.cc domain, titled "Scanana - AI Crypto Portfolio Tracker". It presents itself as an artificial-intelligence-assisted tool for tracking cryptocurrency holdings. Its apparent purpose is to attract crypto users to a portfolio-monitoring service, which is a category that normally invites wallet or account linking. The captured homepage carries a modest amount of text, and no named operator, product mechanics or pricing could be extracted from it.

Scam/Impersonation Risk

The site carries confirmed adverse reputation signals. It is blacklisted by external threat-intelligence sources. Multiple independent security engines classify the domain as malicious, and a further group rate it suspicious. One of these is a tier-one security vendor, whose detection carries particular weight. These detections are the decisive finding. Their convergence on a domain only weeks old, in the crypto-tooling category, matches the profile of a throwaway site built to collect wallet access or credentials. No brand impersonation, conflicting legal identities or confirmed phishing page were identified. The risk therefore rests on the blacklisting rather than on identity contradictions. One abuse report exists against the hosting IP address. It relates to a shared provider address and cannot be attributed to this site, so it carries no weight here. Automated browsing of the homepage showed no external data submissions, wallet-connection prompts, clipboard manipulation, hidden forms or content cloaking. That limits what was observable on the surface. It does not offset the external detections, because a landing page can be clean while a later stage is malicious. Evidence:

• The homepage domain is listed by external blacklist sources, and several security engines flag it as malicious or suspicious.
• The domain was registered in September 2026 (about 0.1 years old).
• 309 web-archive snapshots span September to October 2026 (1 year tracked). They show a continuous but very recent presence, with no earlier history.
• Sandbox runs of the homepage (3 of 3 successful) recorded zero external requests, no wallet-provider activity and no cloaking.

Regulatory Verification Notes

The captured pages give no clear on-page indication of a licensed or registered operator, and no third-party regulatory registration could be tied to the domain. The site's real-world identity is not independently verified. Because the site's category is financial-adjacent, the lack of a clear, checkable corporate and licensing identity matters more than it would for a purely informational site. The registration is held behind a privacy service, which is treated here as an administrative detail rather than a defect. No broker-reputation record matched the site, and the domain does not appear in decentralized-finance protocol directories. Neither fact counts for or against it. Evidence:

• The domain was registered through Namecheap Inc, with the owner redacted by a privacy service, and runs to September 2027.
• The site is served from AS174 (Cogent Communications), on IP space operated by Lunanode Hosting, with the host located in Canada.
• The TLS certificate was issued by YR1 (DV) and is valid to 2026-12-16. Domain-validated encryption confirms only control of the domain, not the identity of the operator.
• The homepage text offered no company name, licence or registry number that could be matched to an official register.

What to Verify Next

Before any engagement, an independent route should establish whether a real company stands behind the service. That means checking the corporate registry and any financial-services or crypto-asset register of the jurisdiction the operator claims. Any claimed team, audit or partnership should be confirmed through the independent party's own channels, not through links on the site. The official support and contact channels should also be confirmed offline. The current threat-intelligence listing should be re-checked later, since removal would indicate remediation. Until then, the site's wallet-connection or login features, if any exist, should not be tested with real assets. Evidence:

• The homepage gives no operator identity to check against a corporate registry.
• The domain is only weeks old and has no prior archive history from which a legitimate operator could be inferred.
• The external listing is current as of the latest scan and may change.

Summary Verdict

The overall posture is high risk. Current blacklisting and multi-engine malicious detections, on a very young domain whose operator cannot be tied to any real-world identity, override the benign surface behaviour. Nothing found offsets the adverse reputation. The evidence does not support treating the site as trustworthy for any sensitive purpose.

Infrastructure Integrity

The site resolves to a single IP address on a Cogent-carried network operated by a low-cost hosting provider. No CDN or web-application firewall was detected, so there is no protective layer to mitigate exposure. The certificate and the stable DNS response are routine and do not reduce the reputation risk. Some automated infrastructure heuristics flagged fragmentation and a thin footprint typical of a young domain. These are unconfirmed and are given little weight against the confirmed findings.

Closing Assessment

The site should be treated as read-only at most. No account login, credential entry, wallet connection or financial transaction should be attempted, and no file should be downloaded from it. Anyone who has already interacted with it should rotate any credentials and revoke wallet permissions.

Signals weighed against the site

• AbuseIPDB: 1 report on hosting IP 170.75.167.55 (Lunanode Hosting Inc., Fixed Line ISP), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.