Is unionpanel.cc a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This is a newly established website on the unionpanel.cc domain. The page captured for analysis is a preview-style page with a Russian-language title that translates roughly as "Preview — screen of the site". The text is substantial but does not clearly state a product, service or business model, so the site's commercial purpose cannot be established from what it shows a visitor.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Multiple independent reputation sources currently flag the domain as malicious or suspicious, and it is confirmed on third-party blacklists. A phishing-history indicator is also associated with it. No conflicting legal entities and no brand impersonation were observed, so the elevated risk comes from the reputation findings and not from an identity contradiction. The site's behaviour was largely unremarkable. It showed no wallet-connection prompts, clipboard manipulation, hidden forms, credential posts to external hosts or content cloaking, and its page loads were stable. These observations reduce the likelihood of an overtly malicious payload on the captured page. They do not offset the external detections, because a very young domain can present a benign page while being used for abuse elsewhere on the site or later. Credential entry, payments and any other sensitive interaction should be treated as unsafe. Evidence:

• Homepage and preview page: the domain was flagged by several independent threat-intelligence sources and appears on external blacklists, with no clean reputation to counterbalance it.
• Domain provenance: registered 2026-08-25 (~0.17 years old), so there is no established operating history.
• Web archive: 1 snapshot, dated 2026-09-02, with no earlier history.
• Behavioural sandbox: 3 of 3 runs completed with HTTP 200. Nine external XHR requests and three external POSTs were seen, with no wallet, clipboard or hidden-form activity.

Regulatory Verification Notes

The captured page gives no clear indication of a licensed or regulated operator. No regulatory registration could be linked to the domain, and on-page disclosure of the operating entity is unclear. This leaves an ownership opacity condition, which is separate from an identity contradiction. No independent evidence ties the site to a real-world company or person. The domain is registered through a mainstream registrar, but a registrar relationship does not establish who operates the site. The valid transport encryption is a basic hygiene control and does not imply legitimacy. No third-party broker or regulator reputation record matched this site. Evidence:

• Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com, with registration running to 2027-08-25.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-21.
• DeFi directory check: the domain is not listed, so no TVL or market-capitalisation data is available.

What to Verify Next

Before any engagement, the operator's identity should be established through channels independent of the site, such as official corporate registries or a direct request to the party that supplied the link. Any claimed licence should be checked directly with the relevant regulator's public register. The reputation detections should be re-checked against current sources, since a compromised or newly repurposed domain can change status quickly. Official contact channels should be confirmed offline. Any request to log in, connect a wallet or send funds that arrives through this domain should be escalated to a security team and not completed. Evidence:

• Domain age: the domain is roughly two months old, so no long-term record can corroborate any claim the site makes.
• Page content: the preview page's title and text do not identify an operating entity or a licence.
• Reputation: the current external detections are the principal open question and are not resolved by the site's own content.

Summary Verdict

The overall posture is clearly cautionary. Confirmed external reputation detections on a very new, unverified domain place it in the elevated-risk category. The benign behaviour of the captured page does not alter that conclusion. Any legitimacy claim is unsupported by independent evidence.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers. The origin server was not observable, so the real hosting location cannot be independently checked. This protective layer is a mitigating factor only. It does not offset the reputation findings, and it can also mask rapid content changes behind the same edge addresses. A heuristic flag for a young domain with sparse subdomains is unconfirmed and carries little weight on its own.

Closing Assessment

The domain should not be used for login, credential entry, wallet connection or any financial interaction. Any access should be limited to passive viewing from an isolated environment, with no downloads. Organisations that have received a link to this domain should treat it as untrusted and report it to their security function.