Is unearthly.cc a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents a Russian-language marketing page for an all-in-one artificial-intelligence application. Its homepage title promises access to several leading AI models, including GPT, Claude and Gemini, in a single product. The apparent business model is a consumer AI aggregator that attracts visitors to an app or subscription service. The site is a recently registered domain with a content-heavy landing page.

Scam/Impersonation Risk

This is the decisive area of the assessment. Two independent reputation sources currently list the domain as malicious. A substantial number of security engines flag it, including two major, well-established security vendors, and a confirmed blacklisting is in effect. The listing is severe enough to override every mitigating factor in the profile. The site markets itself by naming well-known AI brands, which is a common lure pattern for fraudulent app and subscription offers. No explicit brand-impersonation finding, conflicting legal identities, or confirmed credential-harvesting form was recorded. The risk therefore rests on the reputational listing and the very recent registration, not on a contradiction between identity pages. In the behavioral sandbox the homepage loaded consistently across all runs. It showed no wallet-connection prompts, clipboard manipulation, hidden forms, cloaking or fingerprinting. Third-party requests all went to recognized destinations. The page did rewrite large portions of itself after interaction and logged several console errors. That is consistent with a script-heavy front end, but it also means displayed content can change substantially after load. Because the listing, not any single observed behavior, drives the risk, caution is warranted for any sensitive interaction. Evidence:

• The homepage title offers GPT, Claude and Gemini "in one app", using third-party AI brand names as the primary draw.
• The domain was registered in 2026 (about 0.46 years, roughly 169 days old), with its first public archive capture on 2026-05-10.
• The web archive holds only 3 snapshots, all in 2026 (1 year tracked), so there is no long-term operating history.
• Sandbox runs recorded about 8,900 page mutations after interaction, 12 external background requests and 11 external submissions, all to recognized destinations, and no wallet, clipboard, hidden-form or cloaking behavior.

Regulatory Verification Notes

The captured homepage supplies no clear company name, licence or registration reference to assess. This amounts to an unresolved identity picture, not proof of wrongdoing. The real-world operator has not been independently connected to any brand or person. Nothing in the evidence shows the service is licensed or supervised by any authority. The domain is registered through Global Domain Group LLC under a ".cc" suffix, and ownership details are not clearly attributable to a named entity. No third-party broker or regulatory-database entry matched this site. These notes carry limited weight beside the active blacklisting. They matter mainly because any payment or subscription relationship would have no identifiable counterparty. Evidence:

• The homepage presents no verifiable company, licence or registration disclosure.
• Registered 2026-05-10 through Global Domain Group LLC, expiring 2027-05-10.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV), valid to 2026-12-20, which confirms only encryption and domain control, not operator identity.

What to Verify Next

Before any engagement, the AI product should be traced to an official provider or an identifiable company. That means finding the operator's legal name and jurisdiction through independent sources. Official support or contact channels should be confirmed through an offline or independently sourced route. Any claim to offer branded model access should be checked against the named AI providers' own published partner or reseller lists. The domain's current reputation listings should also be re-checked later, since a flagged status can change if the operator or a hosting owner remediates it. Evidence:

• The homepage names several third-party AI brands without showing any partnership or authorization.
• No identifiable operator appears in the captured page content.
• The domain's short archive history offers no earlier ownership or content record to compare against.

Summary Verdict

The site carries an elevated, high-risk posture. Current external threat detections and a confirmed blacklisting dominate the assessment and are not offset by the site's technical hygiene or by the lack of observed identity conflicts. Its legitimacy cannot be established, and its operator remains unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server was not observable. The certificate is valid and issued by a recognized authority. This protective infrastructure is a mitigating factor only. It prevents independent hosting verification, and it can mask rapid content or hosting changes behind a stable front end. It does not offset the active reputational listing.

Closing Assessment

Account login, credential entry, payment and subscription activity on this domain should be avoided. Any interaction should be limited to passive viewing from an isolated, non-sensitive environment. Nothing should be downloaded or installed from the site until its reputation status is independently cleared.