Is shares-netnetcapital.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

NetNet Capital Management, served from a recently registered domain, is a crypto-and-gambling portal styled as a retro "shareholder information system". It promotes NET, a token described as backed by a USDG treasury on Robinhood Chain, and a staking tier (sNET) that pays distributions every 8-hour epoch. Alongside these it offers real-money games (COINflip, Turbo Blackjack, crash and Plinko-style games), a nightly "WinNET" draw, a "Superstore", and 25x leveraged tokenized-equity cards (TURBO) tied to tickers such as MSFT, NVDA and AAPL. Its apparent business model is monetizing wallet-funded deposits through house edge, trading fees and token subscriptions.

Scam/Impersonation Risk

Contradictory signals are present and serious. The domain is blacklisted by external threat-intelligence sources. Several independent security engines classify it as malicious, including two major security vendors. No brand impersonation or conflicting legal identities were observed, so the risk does not come from copying another brand. It comes from the economic model, which carries many critical-risk indicators. The homepage ticker advertises a 1 USDG on-chain "floor", a premium of roughly four times net asset value, and reserves of about eleven million USDG. It also advertises distributions "3 times daily" and the assurance "the coin is fair". All of these are self-reported, and nothing independent corroborates them. Staking yields and a guaranteed floor presented as fixed mechanics resemble a deposit-and-yield scheme, because the funds being deposited are the same funds that pay the returns. The gambling layer adds a 5% fee on automated-market-maker trades and TURBO card activity, a 1% table rake and a house edge on every game. The 25x leveraged equity cards are described as sitting in a manager-custodied sleeve outside the reserves, so deposited funds pass into custodial control. A parody disclaimer states that nothing on the page is an offer. It directly contradicts the page's transactional calls to action, and it gives depositors no protection. Evidence:

• Homepage: the domain was registered in September 2026 (~0.1 years old, about 36 days), and the page already operates deposit-based programs.
• Web archive: 4 snapshots spanning 2026-09-14 to 2026-09-22 (1 year tracked), consistent with a newly launched property.
• External reputation: 9 engines rated the domain malicious and 3 suspicious, and it was not found in the DeFi protocol directory.
• Homepage: 12 distinct business-model red flags were recorded, including guaranteed-return language, deposit-before-service, custodial control of funds and opaque value flow.

Regulatory Verification Notes

The site offers no verifiable legal entity, licence, audit, registered address or named operator. The only "address" given is "Suite 4663, The Permanent Internet", which is not a physical location. Contact runs through a toll-style phone hotline that asks for a wallet address, plus a Telegram channel. Together these show that the operator cannot be identified or held accountable, even though the site takes real-money bets and leveraged positions. For a gambling and securities-like offering, the absence of any gambling licence, securities authorization or reserve attestation is a significant disclosure gap. The decisive concern is still the contradictory-signal evidence above, not this gap alone. No third-party broker or regulator record matched this entity. Evidence:

• Homepage and prospectus links: no company name, licence number, auditor or registered office is disclosed.
• Homepage: contact is limited to a phone hotline and a Telegram channel.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE1 (domain-validated, DV), valid to 2026-12-13. This confirms encryption only, not operator identity.

What to Verify Next

Before any engagement, the operator's legal identity should be established independently. Request the operating company, its jurisdiction and any gambling or securities licence, and check them directly with the relevant regulator's public register rather than through links on the site. The claimed reserves and the "immutable" distribution formula should be tested against audited, third-party attestations. Whether the on-chain contracts have been independently audited should also be checked. Any support or contact channel should be confirmed through an independent route before reliance. If a deposit has already been made, it should be documented, and the relevant platform or exchange should be notified. Evidence:

• Homepage: reserve, supply and staking figures are self-reported and carry no auditor attribution.
• Homepage: the stated 1 USDG floor and the distribution mechanics have no linked independent verification.
• Linked properties: the sub-sites for games, draws, store, careers and TURBO each present separate deposit surfaces, and none discloses an operator.

Summary Verdict

The site is rated at the lowest trust tier. External threat detections combine with a very new domain and a deposit-driven model offering gambling and high-yield token returns. The evidence converges on an elevated-risk posture with a clearly cautionary assessment. Technical hygiene and clean on-page behavior do not outweigh these contradictory signals.

Infrastructure Integrity

The site is fronted by a Cloudflare CDN and WAF, and every observed address is an edge server, so the origin host cannot be independently identified. This offers some protection against direct attack, but it does not validate the operator. Edge-only visibility also means content or behavior can change quickly without any change to the hosting footprint. Benign sandbox behavior, with no external calls, hidden forms or wallet-drainer activity, is a mitigating observation only.

Closing Assessment

The site should be treated as unsafe for logins, credential entry, wallet connection, deposits or any financial interaction. At most, read-only viewing from an isolated browser is reasonable. Anyone who has already interacted with it should secure their wallet approvals and report the matter to the relevant platform or authority.