Is integratesmart-app.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a single-page web property on a recently registered ".xyz" domain, presenting itself to visitors under the title "Web3 Support Portal". It frames itself as a customer-support or help gateway for blockchain and crypto-asset users. Its commercial purpose and operator could not be established from the content captured, because the site gates automated access behind a bot challenge.

Scam/Impersonation Risk

Independent threat-intelligence sources currently flag this domain, and several detection engines rate it malicious or suspicious. The domain is therefore confirmed as blacklisted, which is the decisive contradiction in this assessment. No conflicting legal entities and no direct brand impersonation were observed. The elevated risk rests on the external blacklisting, together with a very young domain and a "support portal" framing aimed at Web3 users. That framing is a pattern often used to solicit wallet credentials, recovery phrases or "support" payments. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms, or credential posts to third-party destinations. This does not offset the blacklisting, but it means the harm mechanism is unconfirmed and could be activated later. The homepage generated a large share of its traffic to external hosts: dozens of cross-origin background requests and several outbound POST submissions, plus repeated browser console errors. All of it went to known, recognised destinations, but the volume is unusual for a plain support page. Evidence:

• Domain registration: registered 2026-07-17 (~0.28 years, about 101 days old), so the domain has no established operating history.
• Homepage reputation: multiple threat-intelligence engines classify the domain as malicious (3) or suspicious (3), and an external blacklist entry is present.
• Homepage behaviour: 27 external background requests and 9 external POSTs across three runs, with 9 console errors and no wallet-connect or drainer activity observed.
• Homepage capture: the page title "Web3 Support Portal" and a roughly 1,900-character text body were captured behind a bot-challenge gate.

Regulatory Verification Notes

The site is not associated with any regulated financial entity, and no third-party regulatory source supports it. The captured content carries no clear licence, corporate registration or named legal operator, and the on-page disclosure position remains unclear. This is a verification gap and not, on its own, proof of wrongdoing. The registration record is incomplete as to the registrant, which is treated as ownership opacity and not as an identity contradiction. No third-party broker reputation record matched this domain, so no broker-level reputational signal applies. The security concerns come from the threat listings described above, not from the absence of a licence. Evidence:

• Registration: registered through OwnRegistrar, Inc., with the registration running to 2027-07-17 and the registrant details incomplete.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-13. This confirms encryption but says nothing about the operator's identity.
• Legal pages: no licence number, registered company name or regulator reference could be tied to the site.

What to Verify Next

Any claim of affiliation with a wallet, exchange or protocol should be checked against that organisation's own official support channels, reached independently of this site. Anyone who has already interacted with the site should review wallet approvals and reset exposed credentials, and should never enter a recovery phrase into a web form. If the operator claims to be a licensed or registered business, the claim should be checked in the relevant national registry. Official contact routes should be confirmed through an offline or independently sourced channel. The threat-intelligence listing should also be re-checked, since it may change if the site is cleaned or taken down. Evidence:

• Homepage framing: the "Web3 Support Portal" title implies support for a third-party platform that the site does not visibly name.
• Domain age: the very recent registration means no long track record exists to corroborate any claim.
• Reputation: active detections mean the listing status should be re-confirmed before any engagement.

Summary Verdict

The assessment is clearly adverse. Active external threat detections combine with a newly created domain, an unestablished operator and a support-themed lure, and none of the technical hygiene present is enough to offset them. The site should be treated as high risk for any sensitive interaction, and its legitimacy is unproven.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address, with the origin server not visible. This shields the real hosting environment from independent verification and allows content to be changed quickly. It is a mitigating factor only, since protective infrastructure is also widely used by abusive sites and does not demonstrate legitimacy. The valid certificate and the stable responses are routine hygiene and do not reduce the reputational risk.

Closing Assessment

The site should not be used for logging in, connecting a wallet, making payments or entering any credentials or recovery phrases. At most, it should be viewed from an isolated environment, with nothing downloaded or signed. Any apparent support request should be redirected to the official channels of the platform it claims to serve, and the domain should be reported to the relevant platform or abuse desk if it was reached through an unsolicited message.