Is gooselab.info a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site on the gooselab.info domain. It is headlined "GooseFX Allocation Live — Claim Your $GOFX Tokens Now". It presents a cryptocurrency token-allocation claim to visitors, using the GooseFX name and a $GOFX ticker. Its apparent purpose is to draw visitors into claiming a token distribution, a lure format commonly used to capture wallet access or credentials.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The domain is currently on a confirmed blacklist, and several independent threat-intelligence engines flag it as malicious or suspicious, including a tier-one security vendor. Historical records also tie the domain to known phishing activity. The page title itself follows a high-urgency "claim your tokens now" template that trades on a third-party project's name, and nothing in the evidence independently links the site to the real GooseFX project or any identifiable operator. Sandbox runs of the page observed no wallet-connection attempts, outbound data posts, clipboard manipulation, hidden forms, or cloaking. This is not exculpatory: the page captured was reachable and stable, but a lure site can stay dormant, and content can be swapped quickly on a very young domain. No conflicting legal identities were found, and no contact-channel anomaly was observed. The risk therefore rests on the reputation findings and the lure pattern, not on identity inconsistency. Evidence:

• Homepage title: "GooseFX Allocation Live — Claim Your $GOFX Tokens Now", an urgency-driven token-claim lure.
• Domain registered 2026-07-21 (~0.27 years old, about 99 days).
• Web archive holds 1 snapshot (2026-07-22), spanning 1 year tracked, so there is no meaningful independent history for the brand claim.
• External reputation checks return 4 malicious and 2 suspicious detections, with the blacklist confirmed by multiple sources.

Regulatory Verification Notes

The captured page exposes no licensing status, no registered company name, and no verifiable corporate or legal disclosures. For a site inviting token claims, this is a verification gap in its own right. Ownership of the domain is not disclosed, and the registrar is Global Domain Group LLC. No third-party broker or regulatory-database entry was matched. The absence of regulatory standing is therefore not offset by any positive entity evidence. A valid transport-encryption certificate is present, but it is a basic domain-validated certificate and says nothing about who operates the site. Evidence:

• Homepage: no company name, license, registration number, or legal pages identified in the captured content.
• Hosted on AS13335 (Cloudflare, Inc., US), registry ARIN.
• TLS certificate issued by WE1 (DV), valid to 2026-12-17 (49 days remaining at assessment).
• Registration expires 2027-07-21 through Global Domain Group LLC.

What to Verify Next

Any claim of a GOFX allocation should be checked only against the project's officially published channels, reached independently of this site (for example, through a manually typed address or the project's verified social accounts). Prospective users should confirm that the project is actually running a claim program and which domain it uses. The relationship between this domain and the genuine project should be treated as unproven until the project confirms it. Wallet software should not be connected, and no seed phrases, signatures, or approvals should be submitted, while these checks are outstanding. Organisations should also consider reporting the domain to the registrar and the relevant abuse desks. Evidence:

• Homepage: token-claim call to action tied to a named project, with no accompanying link to verifiable project documentation.
• Domain age of roughly three months, far younger than an established project's primary web presence would typically be.
• The domain is currently flagged by multiple reputation sources, so independent confirmation carries extra weight.

Summary Verdict

The assessment is clearly adverse and security-forward. Active blacklisting and multiple malicious detections, combined with a brand-themed token-claim lure on a very new domain with no verified operator, outweigh the benign behaviour seen in sandbox testing. The site is classed as carrying elevated risk for any sensitive interaction.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF, and all observed addresses are edge nodes. The origin server was not observable, so hosting cannot be independently verified. Protective infrastructure of this kind is only a mitigating factor. It is widely used by legitimate and malicious sites alike, and it cannot offset the reputation findings. The edge-only visibility also makes it harder to detect rapid content changes behind the front end.

Closing Assessment

At most, the site should be viewed read-only. Wallet connections, logins, credential entry, signing, and any financial interaction should be avoided. Any token allocation should be pursued only through the project's officially confirmed channels.