Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
fdlyint.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 16 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 4 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website, operating under the domain fdlyint.com, presents no usable storefront or product content to a visitor. The page captured is a short interstitial titled as a suspected-phishing warning from its content-delivery provider, after the site's automated access challenge blocked the request. Earlier archive material categorises the domain as a token-sale property, so its apparent purpose is crypto-asset fundraising or trading onboarding, but the operator's business model could not be established.
Scam/Impersonation Risk
This is the dominant risk dimension, and the contradictions are substantial. The domain is currently blacklisted. A substantial number of independent security engines classify it as malicious, and several of the most widely trusted vendors are among them. A confirmed external blacklist is on record. The only page content captured is a protective warning that labels the site as suspected phishing. This is a hard, convergent set of reputational signals, and it points toward credential-harvesting or fraudulent-onboarding use. The site's age compounds the concern: it is a very recent registration with almost no independent history. No conflicting legal entities and no specific brand impersonation were confirmed, so the risk rests on the threat detections rather than on identity inconsistency. Behavioural testing also showed heavy outbound traffic to third-party destinations. Nearly all page activity went to external hosts, nine external data submissions occurred, and the page produced repeated script errors and a large burst of dynamic page changes after interaction. No wallet-draining routines, clipboard tampering, hidden forms or external password forms were detected, which narrows but does not remove the concern.
- Domain registered 2026-06-28 (~0.34 years old, about four months), a very young registration.
- Web archive holds only 2 snapshots, both dated 2026-07-05, covering 1 year tracked, so there is no meaningful independent history.
- Homepage capture returned an access-denied response with a suspected-phishing warning title, and only a brief block of text was retrievable.
- Behavioural runs recorded 131 external XHR/fetch calls, 9 external POSTs, 22 console errors and a maximum DOM change of 1,523 mutations.
Regulatory Verification Notes
No licence, registration number, regulator reference or legal-entity name is attached to this site by any evidence reviewed, and no third-party broker or regulatory-database match exists. Ownership opacity is present: the registration record gives incomplete owner details. This is an administrative limitation and not an identity contradiction. The absence of regulatory standing matters more than usual here. Token-sale and trading-onboarding activity, which is the only category the archive associates with the domain, normally falls under financial-services or securities oversight. The domain therefore carries no regulatory legitimacy to offset the reputational findings. Identity verification remains unresolved, so nothing links the domain to a real-world firm or person.
- Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration expiring 2027-06-28 (a one-year term).
- Served from AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-27. This confirms encryption but says nothing about the operator.
- No regulator, broker-database or licence reference appears in the evidence for this domain.
What to Verify Next
Verification here is mainly about confirming the threat findings and establishing whether the domain has any legitimate counterpart. Anyone who received a link to this domain should trace how it was delivered and confirm, through a separately sourced and independently known channel, whether the organisation named in the message actually uses it. Security teams should re-scan the domain periodically to see whether the detections clear, and should treat any clean result with caution given the domain's age. If the domain is claimed to belong to a financial or token-offering business, its licensing should be checked directly in the relevant national regulator's public register. The official contact channels should be taken from that register and not from this site.
- Detections span multiple independent vendors, so a single false positive is unlikely.
- The domain was registered about four months before this assessment and has only two archive captures.
- The domain has no regulatory-database presence.
Summary Verdict
The site is assessed as high-risk and unsafe for any sensitive interaction. Convergent threat detections, a confirmed blacklist, a protective phishing warning and a negligible operating history outweigh the technically valid encryption and the standard security tooling. Legitimacy is not supported and identity is unverified.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers. The true origin server was not observable, and no hosting-level attribution beyond the CDN is possible. A mainstream CDN and a valid certificate are mitigating factors only. They are common to legitimate and malicious sites alike and cannot offset the external threat detections.
Closing Assessment
The domain should not be used for login, credential entry, wallet connection or any payment or financial transfer. Organisations should block or flag it at the email, web-gateway and DNS layers, and anyone who already entered credentials or funds should change those credentials immediately and notify their provider.
Written analysis generated 2026-11-01 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, history in the web archive, behaviour in a sandbox, hosting and network, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE
04 Hosting and network
- The domain was registered between three and six months ago.Hosting and network
rule:DNS_YOUNG_6M
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fdlyint.com.
- The request stayed on fdlyint.com. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-06-28. Noted
- The earliest public archive of this site is from 2026-07-05. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:3505 |
| Name servers | ETIENNE.NS.CLOUDFLARE.COM, IMANI.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-27 |
| Domain age | 0.34 years (continuous registration) |
| Domain expiry | 2027-06-28 |
| Archive first seen | 2026-07-05 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 16 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fdlyint.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.