Is gzxlab.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page token-claim landing site on a ".info" domain. Its homepage is titled "GZX Allocation Live — Claim Your GreenZone Tokens" and invites visitors to claim an allocation of "GreenZone" (GZX) tokens. Its apparent purpose is a cryptocurrency giveaway or allocation funnel that moves visitors toward claiming digital assets. The material available for review does not establish a named issuer, a product, or a legitimate token programme behind that offer.

Scam/Impersonation Risk

This assessment is cautionary. Contradictory signals are present, and a confirmed blacklisting applies: a substantial group of independent security vendors currently flag the domain as malicious or suspicious, and the threat-intelligence picture is corroborated rather than isolated. No conflicting legal identities or confirmed brand impersonation were observed, so the risk does not stem from an identity contradiction. It stems from the combination of a reputation-based blacklist and the nature of the offer. An "allocation live — claim your tokens" call to action is a lure pattern commonly used to push visitors toward wallet connections, token approvals, or fee payments. The site is also only a few months old. During automated browsing of the homepage, the site sent several data submissions to external third-party services outside the expected set of trusted providers, and a large share of its network activity went to external destinations. No wallet-connection prompts, clipboard tampering, hidden forms, or page cloaking were observed in those sessions. That absence does not offset the blacklisting, because a claim flow can be activated later or only for particular visitors. Evidence:

• Homepage title and framing: promotes a live token "allocation" for visitors to claim, with no identified issuer.
• Reputation check: 11 malicious and 4 suspicious verdicts from security engines, including several leading vendors.
• Homepage behavioral sessions: 3 external data submissions to non-whitelisted destinations, with about 71% of XHR activity going to external hosts.
• Domain provenance: registered 2026-07-28 (~0.25 years old), with 1 archive snapshot, captured in 2026 (1 year tracked).

Regulatory Verification Notes

The site presents no regulatory authorisation, licence, or registration for offering or distributing tokens, and no operating company is named. Any claim to distribute a digital asset carries consumer-protection and securities-law implications that an anonymous site cannot satisfy. Ownership details are opaque, which is an administrative limitation. In this case, however, it adds to an already adverse reputation picture rather than standing alone. The site's valid certificate shows only that the domain controller can obtain basic encryption. It says nothing about the operator's identity or legitimacy. Evidence:

• Homepage: no disclosed legal entity, licence, or registration reference accompanies the token offer.
• Domain registration: through NICENIC INTERNATIONAL GROUP CO., LIMITED, with incomplete ownership details.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-24 (56 days remaining).

What to Verify Next

Any independent confirmation that a "GreenZone" or GZX token programme exists must start from channels reached without using this site, such as an official project source already known to the person checking. The token issuer's identity and any distribution announcement should be verified through those sources. Anyone who has already visited the site and interacted with it should review their wallet for new token approvals and revoke any that are unexpected. Official support and contact channels should be confirmed by an independent, offline route. If the offer relates to a regulated activity, its authorisation should be checked directly with the relevant financial regulator's public register. Evidence:

• Homepage: the claim offer names no verifiable issuer, so the offer cannot be confirmed from the site itself.
• Domain age: the site is roughly three months old, which leaves no long operating record to rely on.
• Reputation: multiple adverse security verdicts mean the site's own links should not serve as a verification route.

Summary Verdict

The overall posture is high risk. Current third-party threat detections are decisive, and a young, anonymous domain promoting a token-claim offer reinforces them. Operator identity remains unverified. Legitimacy cannot be inferred from the site's presentation.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host is not visible. This reflects ordinary protective hosting. It is a mitigating factor only and cannot offset the adverse external detections. Edge-only visibility also prevents independent hosting verification and can mask rapid content changes.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. This means no logins, no credential entry, no wallet connections or token approvals, and no payments or fees. At most, it may be viewed in an isolated environment for analysis. Organisations should consider blocking the domain and reporting it to their security team.