---
title: "Is hylrukrxwfwbooknmtyx.supabase.co a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "hylrukrxwfwbooknmtyx.supabase.co"
verdict: "Critical Risk"
title: "Is hylrukrxwfwbooknmtyx.supabase.co a Scam? Score 0/100"
trust_score: 0
classification_confidence: 45
canonical_url: https://trustsniffer.com/report/hylrukrxwfwbooknmtyx.supabase.co
assessed: 2026-10-19
---

# Is hylrukrxwfwbooknmtyx.supabase.co a scam? 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** hylrukrxwfwbooknmtyx.supabase.co shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk

Assessed 2026-10-19 by automated analysis. Classification confidence 45%.

| Field | Value |
| --- | --- |
| What this site appears to be | This page contains only a short JSON-style error message indicating an invalid requested path. No actionable content, forms, links, or business information are present. |

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 14 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |

## The page as captured


![Screenshot of the hylrukrxwfwbooknmtyx.supabase.co homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/hylrukrxwfwbooknmtyx.supabase.co/screenshots/first.png)

_What hylrukrxwfwbooknmtyx.supabase.co served when TrustSniffer captured it on 2026-10-19. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Security Alert

Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is an unbranded service endpoint hosted on a subdomain of a shared backend-platform domain. Its homepage returns only a short machine-style error message stating that the requested path is invalid. It presents no visible products, navigation, forms, company description or contact details. Its apparent role is a back-end resource rather than a customer-facing business, and no business model can be discerned from what it serves.


### Scam/Impersonation Risk

Contradictory signals are present, and they are what drive the cautionary posture of this assessment. Independent threat-intelligence engines flag the host: two classify it as malicious and one as suspicious, including a major security vendor, and the host is listed as **blacklisted** by external sources. The detections do not specify the nature of the threat, so no particular attack type, such as phishing or malware delivery, can be attributed to the site. No brand impersonation and no conflicting legal identities were observed. The page contains no login form, no hidden form, no wallet-connection logic and no external data submission, and the behavioural runs showed no outbound network activity. These benign behaviours do not offset the external detections. Abuse reports exist against the shared edge address the site resolves to. They are attributed to that address's role as shared content-delivery infrastructure and are therefore discounted. They are not evidence about this site's operator. Because the page is blank, the detections cannot be tied to any visible content, so the threat listing is the decisive negative. Evidence:

- Homepage: returns only a short JSON-style error stating the requested path is invalid, served with a "not found" status. It has no title, no meta description, no links and no forms.
- External reputation: two engines rate the host malicious and one suspicious, while a larger group rates it harmless or undetected. A major security vendor is among the flagging engines.
- Network behaviour: three sandbox runs completed, with zero external requests, zero external form posts and zero wallet or clipboard activity. Three browser console errors were recorded.
- Shared address: 14 abuse reports against the edge address are classed as shared-infrastructure noise and discounted.

### Regulatory Verification Notes

The site exposes no legal, identity, terms, privacy or about pages, so there is no corporate name, licence reference or registration number to assess. Because nothing is published, the real-world operator cannot be independently connected to any business or person. Any claim of legitimacy would therefore be unsupported. No financial, investment or regulated-service activity is advertised, so the absence of licensing disclosure is a verification matter and not a finding against the site. Third-party broker-reputation data returned no match for this host. Evidence:

- Homepage: contains no company name, licence number, registration detail or jurisdiction.
- Hosting: served via AS13335 (Cloudflare, Inc., US).
- Transport encryption: the TLS certificate is issued by WE1 at domain-validated (DV) level and is valid to 2026-11-24. DV confirms only control of the domain name, not the identity of the operator.
- Broker reputation: no matching record in the third-party broker dataset, which is context only and not a regulatory verdict.

### What to Verify Next

Anyone who was directed to this address should first establish who sent the link and why. The sender should be asked, through an independent channel such as a known phone number or an in-person contact, to confirm that the endpoint is intentional and to supply the organisation's official website address. A prospective user should not rely on this address to identify a counterparty. The official channels of the claimed organisation should be reached through routes found independently, not through anything reached from here. If the address belongs to an application the user operates or integrates with, the owner or administrator should review the project's configuration and exposure. They should also confirm whether the external detections stem from content that was served from this host in the past. Evidence:

- Homepage: shows no identifying content, so the claimed organisation cannot be established from the site itself.
- Page status: the not-found response suggests the root path is not an intended public entry point.
- External reputation: current detections by multiple engines mean the host's status should be re-checked after any remediation.

### Summary Verdict

The site carries an elevated risk assessment and is not suitable for sensitive interaction. External threat-intelligence detections are decisive, and the site's own content provides neither identity nor purpose that could offset them. The behavioural runs were clean, but that is not enough to support trust, and the operator remains unidentified.


### Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and the observed addresses are edge servers; the origin server was not observed. This is a mitigating factor only. A valid certificate and mainstream edge protection show competent hosting. They do not establish legitimacy and cannot offset the reputational risk from the external detections.


### Closing Assessment

At most, the address should be treated as read-only. Account login, credential entry and any financial or payment interaction should be avoided, and nothing should be downloaded from it, until the owner has been independently identified and the external detections are resolved.


_Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by external reputation, page content.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Page content
- The page loaded on its own domain but had no readable content. (Page content `rule:PAGE_CONTENT_EMPTY`)
- The page shows few of the signs expected from a trustworthy operator. (Page content `rule:PAGE_TRUST_QUALITY_LOW`)
- The page has no title, which almost every website sets. (Page content `rule:PAGE_TITLE_MISSING`)
- The browser raised a warning while loading the page. (Page content `rule:PAGE_BROWSER_FLAGS_SUSPICIOUS`)

### Signals weighed against the site

- AbuseIPDB: 14 reports on hosting IP 172.64.149.246 (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of hylrukrxwfwbooknmtyx.supabase.co.

- The request stayed on hylrukrxwfwbooknmtyx.supabase.co. It was not redirected to another domain. (Clear)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | Not available |
| Country | Not available |
| Server IP | 172.64.149.246 |
| Name servers | Not available |
| CDN / edge network | Lookup incomplete |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-24 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not available |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 0% confidence, 14 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about hylrukrxwfwbooknmtyx.supabase.co at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-aerodrome.co](https://trustsniffer.com/report/portal-aerodrome.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [shibinhood.co](https://trustsniffer.com/report/shibinhood.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [pciymarket.co](https://trustsniffer.com/report/pciymarket.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [bagsfumbled.co](https://trustsniffer.com/report/bagsfumbled.co), another .co site assessed as critical-risk (Critical Risk, 12/100)
- [mediafires.co](https://trustsniffer.com/report/mediafires.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [herofx.co](https://trustsniffer.com/report/herofx.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [onbroker.co](https://trustsniffer.com/report/onbroker.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [solpost.co](https://trustsniffer.com/report/solpost.co), another .co site assessed as critical-risk (Critical Risk, 0/100)
- [uni-swap-live.pages.dev](https://trustsniffer.com/report/uni-swap-live.pages.dev), another site assessed as critical-risk (Critical Risk, 0/100)
- [votes-alignedlayer.live](https://trustsniffer.com/report/votes-alignedlayer.live), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 27, 2026: 7 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-27)
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/hylrukrxwfwbooknmtyx.supabase.co) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/hylrukrxwfwbooknmtyx.supabase.co · assessed 2026-10-19.*