Is blosil.in a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is the Blosil landing page for a website-building SaaS, presented in a “Launching Soon” state with an AI builder, a free-start offer, and 50 free credits; its apparent business model is to attract users to a hosted site-builder service and later monetize subscriptions, paid credits, or upgrades.

Scam/Impersonation Risk

The site presents a relatively benign SaaS landing page, and the page analysis did not identify brand impersonation, a conflicting legal identity, or a sensitive login form. However, this benign presentation is outweighed by confirmed blacklist status and multiple external malicious detections, creating a material risk that sensitive interaction with the domain could expose users to harmful content or infrastructure. Abuse reports associated with an Amazon content-delivery IP are attributed to shared infrastructure, so they do not independently establish that every report concerns Blosil; they nevertheless form part of the broader adverse reputation picture. No identity contradiction was observed, but the operator’s real-world identity remains unverified. Evidence:

• External reputation evaluation recorded 9 malicious and 1 suspicious detections for the domain, with Fortinet and Sophos among the tier-one vendors identifying a threat.
• The domain was present on an external blacklist; Google Safe Browsing did not report a malicious hit.
• The behavioral capture observed 17 external XHR requests, 14 non-whitelisted XHR requests, and 2 non-whitelisted POST requests from the homepage.
• The site’s registration record shows a domain age of 17.27 years, created on 2009-05-16 and expiring on 2030-05-16; age and continuity do not offset the confirmed reputation contradictions.

Regulatory Verification Notes

The visible homepage identifies the service as Blosil and displays “Contact Us” and a 2025 copyright notice, while the registration record names Blosil Labtech Private Ltd. These signals are consistent with a commercial software venture but do not independently verify that the named organization operates the website. The visible content does not provide a license, registration number, or detailed corporate disclosure; for a SaaS provider this is principally a transparency and identity-verification gap rather than standalone evidence of fraud. The landing page is also extremely limited, with no visible terms, refund information, or substantive corporate disclosures in the supplied page content. Evidence:

• The homepage states “Launching Soon,” advertises “Try Airo AI Builder,” and offers “Get 50 free credits” and “Start for free.”
• The homepage contains a “Contact Us” reference and “Copyright © 2025 Blosil - All Rights Reserved,” but no visible license or registration number.
• Registration records identify GoDaddy.com, LLC as registrar and Blosil Labtech Private Ltd. as the registrant organization.
• The historical record spans 2010-06-25 through 2025-04-10, with 16 years tracked; the available archival coverage is sparse relative to that period.

What to Verify Next

Before any account creation, credential submission, payment, or operational reliance, an institution should independently confirm that Blosil Labtech Private Ltd. is the operating entity through an authoritative corporate registry and establish that the entity controls the domain. Any proposed subscription or credit purchase should be checked against independently sourced terms, cancellation and refund provisions, and payment-provider protections. Contact details should be validated through an independent, offline route rather than relying solely on the landing page. Evidence:

• The homepage contains no login form, password field, sensitive form, or hidden form.
• The page provides only minimal marketing content and a cookie-consent notice, without visible terms, refund policy, or detailed company disclosure.
• The visible business description concerns a hosted website builder, free trial credits, and potential paid upgrades; no regulated financial product is presented.

Summary Verdict

The overall posture is critical, with a confirmed sensitive-interaction risk. The site’s apparent SaaS purpose and conventional presentation do not provide a sufficient basis for trust in light of the converging external threat and reputation contradictions. Identity verification is incomplete, and the website should not be treated as an approved or trusted service endpoint.

Infrastructure Integrity

The website is delivered through CDN/WAF infrastructure using Amazon.com, Inc. hosting on AS16509, with observed edge addresses rather than an observable origin server. This provides a meaningful exposure-mitigation layer, but shared CDN protection is an infrastructure safeguard only and does not validate the operator or neutralize the adverse reputation findings. The site uses a valid DV TLS certificate issued by GoDaddy TLS Intermediate CA DV - R1v1, which is a transport-security control rather than proof of legitimacy.

Closing Assessment

Prospective users should refrain from login, credential submission, and financial transactions until independent corporate, service, and contact-channel checks are completed and the external reputation issue is resolved or satisfactorily explained.

Signals weighed against the site

• AbuseIPDB: 13 reports on hosting IP 76.223.105.230 (Amazon.com, Inc., Content Delivery Network), 26% confidence. The reports are attributed to shared infrastructure, not specifically to this website.