Is gxlaobao.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a Chinese-language landing page for the “小狐钱包” cryptocurrency wallet application. It promotes wallet downloads, multi-chain asset support, private-key and mnemonic storage on the user’s device, cold-wallet and multisignature features, and related cryptocurrency guides and articles. Its apparent business model is distribution of a digital-asset wallet and potentially associated in-app services or ecosystem referrals.

Scam/Impersonation Risk

The site presents a high-stakes digital-asset service while making expansive, unsupported claims, including being a “globally leading” and “largest” digital-currency wallet, serving nearly 20 million users, operating across more than 200 countries and regions, and processing more than 30 million daily transactions. The homepage also claims that private keys and mnemonics are generated and stored exclusively on the user’s device, but the supplied page content provides no independent audit, publisher evidence, or other substantiation for these security and scale assertions. These claim-to-evidence gaps, combined with opaque value-flow indicators, materially increase the risk associated with downloading or relying on the application. Confirmed blacklist status and malicious detections from external threat-intelligence sources are direct contradictions; no separate brand-impersonation finding was recorded. Evidence:

• The homepage claims support for BTC, ETH, BSC, TRON, Aptos, Polygon, Solana, Cosmos, Polkadot, EOS and other networks, alongside device-held key and mnemonic claims.
• The homepage displays unsupported scale counters for 200+ countries and regions, 30M+ daily transactions and 20M+ users, and describes the wallet as globally leading and the largest digital-currency wallet.
• External reputation telemetry recorded 15 malicious detections and 1 suspicious detection among 21 evaluated results; blacklist status was reported by two external sources.
• Registration telemetry records creation on 2023-12-27T19:28:35Z and an age of 2.65 years; historical telemetry records 26 archive snapshots, captures in 2015–2026, and 15 years tracked.

Regulatory Verification Notes

The site’s apparent operator identity remains unverified, and the available pages do not establish a legal entity, regulatory authority, license number, or independent audit applicable to a service handling digital assets. This is a material disclosure gap for a wallet distribution site, although the absence of a stated license is a verification issue rather than, by itself, proof of fraud. The transport layer provides encryption, but a domain-validated certificate does not validate the operator, application integrity, custody model, or regulatory standing. Evidence:

• The homepage and associated informational content provide product, security and usage claims without citing an applicable regulator, license authority, registration number or independent security audit.
• The site’s hosting telemetry identifies AS54801, ZILLION-NETWORK - Zillion Network Inc., US.
• The site’s TLS certificate is issued by YR2, uses DV validation, and is valid to 2026-09-27T07:40:40+00:00.

What to Verify Next

Before any installation or sensitive interaction, an independent party should confirm the real-world publisher of the application through an official app-store record or a separately obtained, cryptographically verifiable distribution channel. Any claimed regulatory status should be checked directly with the relevant jurisdictional registry, and the application package, signing identity and published integrity information should be compared with records obtained through an independent route. Contact channels should likewise be confirmed through an offline or independently sourced channel rather than relying solely on the website. Evidence:

• The homepage provides application-download calls to action but the supplied content does not provide independently verifiable publisher or package-signing information.
• The site contains one contact form, with no login form, password form or other sensitive web form identified.
• No external links were identified in the supplied link analysis, limiting direct corroboration from the site itself.

Summary Verdict

The website has a critical trust posture driven by confirmed external threat detections and blacklist status, compounded by unsupported high-stakes security and scale claims. Its legitimacy and operator identity are not independently established, so sensitive interaction cannot be treated as acceptable on the available evidence.

Infrastructure Integrity

No CDN or WAF was detected. The site resolves to one likely origin address hosted by ZILLION-NETWORK - Zillion Network Inc., US, on AS54801; this provides a concrete hosting path but no meaningful legitimacy assurance or protective infrastructure benefit.

Closing Assessment

Prospective users should restrict activity to passive viewing and should not download software, authenticate, disclose credentials or conduct financial transactions until the publisher, application integrity and applicable regulatory position have been independently validated.