--- title: "Is claim-alignedlayer.xyz a Scam? Trust Score 7/100" source: TrustSniffer type: Website trust & fraud report subject: "claim-alignedlayer.xyz" verdict: "Critical Risk" title: "Is claim-alignedlayer.xyz a Scam? Risk Report, Score 7/100" trust_score: 7 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/claim-alignedlayer.xyz assessed: 2026-10-26 --- # Is claim-alignedlayer.xyz a scam? TrustSniffer's high-risk assessment: 7/100 ## Verdict **Verdict: Critical Risk, trust score 7/100.** claim-alignedlayer.xyz shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk Assessed 2026-10-26 by automated analysis. Classification confidence 55%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 2 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 2 months old (Most scam domains are under a year old) | Risk | | Web archive | Never archived (No public history of this site) | Watch | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the claim-alignedlayer.xyz homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/claim-alignedlayer.xyz/screenshots/first.png) _What claim-alignedlayer.xyz served when TrustSniffer captured it on 2026-10-26. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. BlastLine presents itself as a unified communications console that offers bulk SMS messaging, voice calls and HLR (mobile number lookup) services from a single dashboard. It appears to be a commercial messaging-platform business, but it is served from a recently registered domain whose name reads "claim-alignedlayer", wording that has no evident connection to messaging services. ### Scam/Impersonation Risk Confirmed contradictory signals are present. The domain is on an external blacklist, and at least two independent security engines classify it as malicious, including a major security vendor in the highest-credibility tier. No conflicting legal identities and no brand impersonation were identified, so the risk comes from reputation rather than identity. The domain name and the page content also do not match. The name suggests a token-claim or blockchain-style destination, while the homepage title advertises a console for SMS, calls and HLR lookups. That mismatch is a recognised pattern for repurposed or throwaway domains, and the domain's youth reinforces it. Behavioural testing found heavy outbound activity: nearly all network traffic after interaction went to external destinations, including repeated outbound POST requests and recurring console errors. Those destinations were on recognised allow-lists, and no wallet-drainer, clipboard-hijack, hidden-form or credential-exfiltration behaviour was detected. HLR lookups and bulk SMS are also services that bad actors can use for number harvesting and message abuse. For that reason the combination of blacklisting and a brand-new domain carries significant weight. Credential entry, account creation and financial interaction are unsafe on this site, and only passive viewing is reasonable. Evidence: - Homepage: the page title advertises "SMS, calls and HLR in one console", which does not correspond to the "claim-alignedlayer" domain wording. - Domain registration: created 2026-08-20, about 0.18 years (roughly 66 days) old, so there is no established operating history. - Reputation: listed on an external blacklist, with 2 malicious and 2 suspicious verdicts across the engines consulted, including one top-tier vendor. Safe Browsing did not flag it. - Behavioural sandbox: 27 external XHR/fetch calls and 9 external POSTs across 3 successful runs, with up to 97.6% of observed activity directed off-site and 9 console errors. ### Regulatory Verification Notes The captured homepage does not make it clear whether the operator holds any telecommunications, messaging-provider or data-handling authorisation. A service handling subscriber-number lookups and bulk messaging would ordinarily be expected to state its legal entity and compliance basis, and the available pages give no clear corporate disclosure. This is a verification gap rather than proof of wrongdoing, and the confirmed reputational contradictions above are what drive the cautionary posture. No third-party broker or regulatory-database entry was matched, so no external licensing signal supports or undermines the site. The registrar is a commodity registrar (PDR Ltd. d/b/a PublicDomainRegistry.com), and the registration record is fully populated. It identifies an individual registrant rather than a company, which fits an unincorporated operator more readily than a regulated messaging provider. Evidence: - Homepage and site pages: no licence, registered company name or regulatory registration number is clearly presented. - WHOIS: registered through PDR Ltd. d/b/a PublicDomainRegistry.com, registrant listed as an individual with no organisation, expiry 2027-08-20. - Hosting and encryption: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US); TLS certificate issued by WE1 at DV level, valid to 2027-01-16. ### What to Verify Next Any prospective engagement should start from the assumption that the service is untrusted until the operator is shown to be a real, accountable business. The operator's claimed legal entity should be checked against the official company registry of its stated jurisdiction, together with any telecommunications or messaging-provider registration it claims to hold. Contact and support channels should be confirmed through an independent route, not through links or forms on the site. The relationship between the "alignedlayer" wording in the domain and the BlastLine brand should also be established, since the site gives no explanation for the mismatch. Until then, no number lists, API keys or payment details should be supplied. Evidence: - Homepage: the BlastLine brand and the domain name do not match, and no explanation is given. - Registration record: the domain is only weeks old and has no corporate registrant. - Reputation: the blacklist and malicious detections remain active, so any claim of legitimacy should be checked against independent sources first. ### Summary Verdict The available evidence supports an elevated-risk posture. Confirmed external threat detections, a very young domain and a mismatch between the domain name and the advertised service converge on this conclusion. The positive technical signals, such as a valid certificate, complete registration data and stable page behaviour, are routine for any newly deployed site and do not offset the reputational findings. The site is suitable at most for passive, read-only viewing. ### Infrastructure Integrity The site is served entirely through Cloudflare's CDN and web application firewall. All four observed addresses are Cloudflare edge servers in the US, and the underlying origin server could not be observed. The site presents a valid DV certificate from a recognised issuer and shows bot-protection behaviour. These are mitigating factors only, because this infrastructure is available to any customer, legitimate or not. It cannot verify the operator or hosting origin, and it can mask rapid content changes behind the edge. It therefore does not offset the confirmed external threat detections. ### Closing Assessment Account login, credential entry, API-key registration, number-list uploads and any payment should be avoided entirely. If the site must be examined, it should be viewed read-only from an isolated environment. Any business need for these messaging services should be directed to an established, independently verifiable provider. _Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 3 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) - The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`) ### 03 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`) - Many of the responses the page received looked generated rather than served normally. (Behaviour in a sandbox `rule:BEHAV_SYNTHETIC_RESPONSES_HIGH`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of claim-alignedlayer.xyz. - The request stayed on claim-alignedlayer.xyz. It was not redirected to another domain. (Clear) - Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-08-20. (Noted) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3033::6815:321b | | Name servers | AGUSTIN.NS.CLOUDFLARE.COM, NOLA.NS.CLOUDFLARE.COM | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2027-01-16 | | Domain age | 0.18 years (continuous registration) | | Domain expiry | 2027-08-20 | | Archive first seen | Not available | | Archive snapshots | 0 | | Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about claim-alignedlayer.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [allthemoney-xrp.xyz](https://trustsniffer.com/report/allthemoney-xrp.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [nova-crypto.xyz](https://trustsniffer.com/report/nova-crypto.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [migrate-onyx.xyz](https://trustsniffer.com/report/migrate-onyx.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [demo-vercel.xyz](https://trustsniffer.com/report/demo-vercel.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [fauci-sol.xyz](https://trustsniffer.com/report/fauci-sol.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [eltoadpepe.xyz](https://trustsniffer.com/report/eltoadpepe.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [pumpfunonsol.xyz](https://trustsniffer.com/report/pumpfunonsol.xyz), another .xyz site assessed as critical-risk (Critical Risk, 5/100) - [devmem.xyz](https://trustsniffer.com/report/devmem.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100) - [hodlhodldesktop.com](https://trustsniffer.com/report/hodlhodldesktop.com), another site assessed as critical-risk (Critical Risk, 10/100) - [hash-cats.xyz](https://trustsniffer.com/report/hash-cats.xyz), another .xyz site assessed as critical-risk (Critical Risk, 18/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) - [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23) - [How to check if TRC20 USDT is genuine Tether](https://trustsniffer.com/blog/how-to-check-if-trc20-usdt-is-genuine-tether) --- *Source: [TrustSniffer](https://trustsniffer.com/report/claim-alignedlayer.xyz) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/claim-alignedlayer.xyz · assessed 2026-10-26.*