Is solipsist.cc a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at solipsist.cc is a newly registered domain under the ".cc" top-level domain. Its homepage currently returns a "404 Not Found" error page with only a few characters of text. It shows no products, services, branding or stated business purpose, so its intended function cannot be determined from the content. A bare landing page like this on a very recent registration is consistent with an unused or staging domain, and it is also consistent with an infrastructure placeholder that could be repurposed quickly.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Several major threat-intelligence engines currently flag the domain as malicious, and others mark it as suspicious. These include a tier-one security vendor, and the domain also appears on an external blacklist. The domain is therefore blacklisted by independent third parties. The data shows no brand impersonation, no conflicting legal identities, and no page-level phishing form. The homepage offers no content that would explain or rebut the detections. The detections coincide with a registration only days old, which is a pattern commonly seen when fresh domains are staged for phishing or malware delivery before any visible content is published. This assessment calls for a clearly cautionary posture. The behavioral sandbox runs showed no external data transmission, wallet interaction, clipboard manipulation, hidden forms or cloaking. This is the current observed state of a near-empty page, and it does not neutralise the blacklist findings. Evidence:

• Homepage: returns a "404 Not Found" page containing only a few characters of text, with no identifiable business content.
• Threat-intelligence reputation: two engines rate the domain malicious and three rate it suspicious, including a tier-one security vendor, and it also appears on an external blacklist.
• Domain provenance: registered 2026-10-09 (~0.03 years, about 12 days old), expiring 2027-10-09.
• Web-archive depth: 2 archive snapshots, first seen 2026-10-09 and last seen the same day, which reflects a history only days long.

Regulatory Verification Notes

The captured page contains no legal, terms, privacy, about or contact content. It names no operating company, license or registration number. This is a content gap rather than evidence of misconduct, and it leaves no basis for connecting the domain to any real-world entity or regulated activity. No third-party broker or regulatory listing matched this domain, so there is no external regulatory context to weigh in either direction. The independent reputational detections described above are a separate matter and are not regulatory findings. Evidence:

• Homepage: shows no company name, jurisdiction, license or registration disclosure.
• Domain registration: through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by YE2 at domain-validation (DV) level, valid to 2027-01-07. This confirms only encryption and domain control, not the operator's identity.

What to Verify Next

No sensitive interaction is advisable while the threat detections remain active. Re-check the domain's standing across independent threat-intelligence sources after a meaningful interval, and confirm whether the flags have been cleared. If the domain was supplied by a third party, such as an email, advertisement or message, confirm its origin through an independent, offline route and the relevant party's official channels. Any claim of affiliation with a named company should be checked against that company's own published domain list. Registry checks should be undertaken only if the site later publishes licensing or corporate claims. Evidence:

• Reputation status: the current detections and blacklist listing are the baseline against which a later re-check should be compared.
• Homepage content: the page currently asserts no affiliation, so any future claim of affiliation would need independent confirmation.
• Domain age: registered 2026-10-09, so no meaningful operating history exists to rely on.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Independent threat detections and an external blacklist listing, combined with a registration only days old and no content showing legitimate purpose, outweigh the technically clean behavior observed on the page. The domain is not currently suitable for any login, credential entry or financial interaction.

Infrastructure Integrity

The domain is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The origin server was not observable. This is a mitigating factor only and cannot offset the reputational risk. Edge-only visibility prevents independent verification of where the content is actually hosted, and it allows content to be swapped rapidly behind the same address. The TLS certificate is valid, but it is a basic domain-validated one and carries no assurance about the operator.

Closing Assessment

The site should be treated as read-only at most. No credentials, wallet connections, payments or downloads should be entrusted to it until the threat detections are cleared and the operator is independently identified. Any link that led here should be treated with suspicion and reported to its source.