Is lab-revolution.live a scam? TrustSniffer's high-risk assessment: 4/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The domain lab-revolution.live is a very young website whose homepage presents almost no readable content. The captured page carries only a generic placeholder title and a few characters of text, with no visible products, services, company description or calls to action. Its apparent purpose and business model cannot be determined from what it shows visitors. Its reputation profile is nonetheless adverse.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The domain is blacklisted by external threat-intelligence sources, and a double-digit count of security engines classify it as malicious, with several additional engines rating it suspicious. Those engines include multiple top-tier vendors, which makes the detections hard to dismiss as a single-source false positive. The detections do not specify a threat category, so the site cannot be called phishing or malware on this evidence alone. Nonetheless, the combination of a very recent registration and a broad blacklist footprint matches the profile of disposable infrastructure used for abusive campaigns. No brand impersonation and no conflicting legal identities were observed, and the homepage names no entity to impersonate. The behavioural sandbox found no malicious runtime activity: no third-party requests, no wallet-connection or clipboard manipulation, no hidden forms and no content cloaking. That absence is a mild mitigating observation. It does not offset the blacklist, because a page this empty may be a staging or dormant state. Content can be swapped quickly without any change to the domain's reputation record. Evidence:

• Homepage: the captured page returned successfully but holds only a placeholder title and a trivial amount of text, with no identifiable offering.
• Domain provenance: registered 2026-06-03 (~0.4 years old), so the domain has no meaningful operating history.
• Reputation: 10 security engines rate the domain malicious and 4 suspicious, including 3 tier-1 vendors, and an external blacklist hit is confirmed.
• Homepage runtime behaviour: 3 of 3 sandbox runs completed with zero external requests, no wallet-connect activity and no console errors.

Regulatory Verification Notes

No legal, terms, privacy or about content was captured, so there is no named operating entity, licence, registration number or jurisdiction against which to test the site. The registrant details are incomplete, which leaves ownership opacity. That is an administrative limitation and not an identity contradiction. It matters here because nothing else on the site establishes who operates it. The real-world operator is unidentified, and no regulatory standing can be inferred. No third-party broker or regulator record matched this domain. Apparent technical hygiene, such as a valid certificate, says nothing about operator identity or licensing. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-06-03.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-29.
• Homepage: no company name, licence or registration disclosure is published.

What to Verify Next

The site should not be engaged for any sensitive purpose until the blacklist status is independently re-checked and the operator is identified through an independent route. Reputation should be re-queried directly with the major threat-intelligence sources after a reasonable interval, since a cleared listing and a persistent one lead to different conclusions. Any claimed business relationship with this domain should be confirmed through contact details obtained outside the site, such as a prior contract or an official channel of the supposed counterparty. If someone sent the link, its origin should be verified out of band with the sender. If the site later publishes an operating entity or licence, that claim should be checked against the relevant public registry before it is relied on. Evidence:

• Reputation record: the malicious and suspicious classifications are current at the time of analysis.
• Homepage: it names no operator or counterparty that could be validated.
• Domain age: the registration is under one year old, so there is no established record to cross-check.

Summary Verdict

The overall posture is high-risk. Hard contradictory signals from multiple independent sources outweigh the benign runtime behaviour and the valid encryption certificate. The site is unproven in identity and purpose, and the evidence points toward abuse potential and not toward legitimacy. Legitimacy cannot be presumed on the available evidence.

Infrastructure Integrity

The site is fronted by Cloudflare, a mainstream CDN and WAF provider, and every observed address is an edge node. The origin server was not observable. This is a mitigating factor only. It shows the domain is properly provisioned and the certificate is valid, but it does not vouch for the operator and cannot offset the external threat detections. Because only edge nodes are visible, the hosting behind the site cannot be independently confirmed, and content could be replaced without any visible infrastructure change.

Closing Assessment

Treat the domain as untrusted. Do not log in, enter credentials, connect a wallet or make any payment or financial commitment through it. If it must be visited at all, restrict access to passive viewing from an isolated, non-sensitive environment, and report the link to the relevant security team if it arrived through an unsolicited message.