Is hylrukrxwfwbooknmtyx.supabase.co a scam? 0/100

Security Alert

Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is an unbranded service endpoint hosted on a subdomain of a shared backend-platform domain. Its homepage returns only a short machine-style error message stating that the requested path is invalid. It presents no visible products, navigation, forms, company description or contact details. Its apparent role is a back-end resource rather than a customer-facing business, and no business model can be discerned from what it serves.

Scam/Impersonation Risk

Contradictory signals are present, and they are what drive the cautionary posture of this assessment. Independent threat-intelligence engines flag the host: two classify it as malicious and one as suspicious, including a major security vendor, and the host is listed as blacklisted by external sources. The detections do not specify the nature of the threat, so no particular attack type, such as phishing or malware delivery, can be attributed to the site. No brand impersonation and no conflicting legal identities were observed. The page contains no login form, no hidden form, no wallet-connection logic and no external data submission, and the behavioural runs showed no outbound network activity. These benign behaviours do not offset the external detections. Abuse reports exist against the shared edge address the site resolves to. They are attributed to that address's role as shared content-delivery infrastructure and are therefore discounted. They are not evidence about this site's operator. Because the page is blank, the detections cannot be tied to any visible content, so the threat listing is the decisive negative. Evidence:

• Homepage: returns only a short JSON-style error stating the requested path is invalid, served with a "not found" status. It has no title, no meta description, no links and no forms.
• External reputation: two engines rate the host malicious and one suspicious, while a larger group rates it harmless or undetected. A major security vendor is among the flagging engines.
• Network behaviour: three sandbox runs completed, with zero external requests, zero external form posts and zero wallet or clipboard activity. Three browser console errors were recorded.
• Shared address: 14 abuse reports against the edge address are classed as shared-infrastructure noise and discounted.

Regulatory Verification Notes

The site exposes no legal, identity, terms, privacy or about pages, so there is no corporate name, licence reference or registration number to assess. Because nothing is published, the real-world operator cannot be independently connected to any business or person. Any claim of legitimacy would therefore be unsupported. No financial, investment or regulated-service activity is advertised, so the absence of licensing disclosure is a verification matter and not a finding against the site. Third-party broker-reputation data returned no match for this host. Evidence:

• Homepage: contains no company name, licence number, registration detail or jurisdiction.
• Hosting: served via AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by WE1 at domain-validated (DV) level and is valid to 2026-11-24. DV confirms only control of the domain name, not the identity of the operator.
• Broker reputation: no matching record in the third-party broker dataset, which is context only and not a regulatory verdict.

What to Verify Next

Anyone who was directed to this address should first establish who sent the link and why. The sender should be asked, through an independent channel such as a known phone number or an in-person contact, to confirm that the endpoint is intentional and to supply the organisation's official website address. A prospective user should not rely on this address to identify a counterparty. The official channels of the claimed organisation should be reached through routes found independently, not through anything reached from here. If the address belongs to an application the user operates or integrates with, the owner or administrator should review the project's configuration and exposure. They should also confirm whether the external detections stem from content that was served from this host in the past. Evidence:

• Homepage: shows no identifying content, so the claimed organisation cannot be established from the site itself.
• Page status: the not-found response suggests the root path is not an intended public entry point.
• External reputation: current detections by multiple engines mean the host's status should be re-checked after any remediation.

Summary Verdict

The site carries an elevated risk assessment and is not suitable for sensitive interaction. External threat-intelligence detections are decisive, and the site's own content provides neither identity nor purpose that could offset them. The behavioural runs were clean, but that is not enough to support trust, and the operator remains unidentified.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and the observed addresses are edge servers; the origin server was not observed. This is a mitigating factor only. A valid certificate and mainstream edge protection show competent hosting. They do not establish legitimacy and cannot offset the reputational risk from the external detections.

Closing Assessment

At most, the address should be treated as read-only. Account login, credential entry and any financial or payment interaction should be avoided, and nothing should be downloaded from it, until the owner has been independently identified and the external detections are resolved.

Signals weighed against the site

• AbuseIPDB: 14 reports on hosting IP 172.64.149.246 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.