Is orbitrelaydata.cfd a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a very recently registered website at orbitrelaydata.cfd that currently presents visitors with a security interstitial headed "Suspected Phishing" instead of any business content. Its commercial purpose, products, and operator cannot be established from what the site shows, and no brand or operator can be independently connected to it.

Scam/Impersonation Risk

Multiple independent reputation sources currently flag this domain as malicious or suspicious, and a major security vendor is among those listing it. This confirmed blacklist presence is the decisive finding and is not offset by the technical hygiene seen elsewhere. Together with the interstitial a visitor meets, it points to active phishing or malicious-hosting concern, and the posture is high-risk for any sensitive action. Automated browsing showed no wallet-draining routines, clipboard tampering, hidden forms, or credential posts to outside parties. The site did issue heavy volumes of third-party requests, with almost all external traffic going to outside hosts, and the browser console logged numerous script errors. The page also changed sharply once interaction began. These behaviors show an unstable, externally dependent page. They do not outweigh the reputation findings. No conflicting legal identities or brand impersonation were observed, so the elevated risk rests on the external threat detections and the phishing designation. Evidence:

• Homepage: a visitor is served a block page titled "Suspected Phishing" instead of site content.
• Reputation checks: 7 engines rated the domain malicious and 4 suspicious, including a tier-1 security vendor.
• Domain provenance: registered 2026-09-09 (~0.12 years, about 42 days old); 47 archive snapshots, all in 2026 (1 year tracked).
• Homepage behavior: 96 external XHR/fetch calls, 9 external POSTs, and 17 console errors across 3 runs.

Regulatory Verification Notes

No licensing, registration, or corporate-identity information attributable to this site was found. No regulated-entity status could be established, and no third-party broker or regulatory record matched the domain. Because the site shows no evidence of a legitimate operator, any claim of authorization or regulation made in connection with it should be treated as unsupported. The domain is a very young registration made through a mainstream registrar, and it uses a low-cost, domain-validated certificate. Those facts do not mitigate the reputation findings. Evidence:

• Registration: domain registered through NameSilo, LLC; created 2026-09-09, expires 2027-09-09.
• Transport security: TLS certificate issued by YE2 (DV), valid to 2026-12-08 (47 days remaining at analysis).
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Identity: the site could not be independently linked to any real-world brand or person.

What to Verify Next

Any party that has already interacted with this domain should confirm through an independent, offline route whether the organization it claims to represent actually operates it. Official channels should be taken from a trusted source and not from this site. Anyone who entered credentials, wallet details, or payment information should treat them as exposed, change reused passwords, and review accounts for unauthorized activity. Organizations should check whether the domain appeared in any inbound message or advertisement, and report such messages to their security team. Licensing should be checked with the relevant regulator's own registry only if the site claims to be a regulated provider. Evidence:

• Homepage: the visitor-facing warning page offers no operator, product, or contact information to verify.
• Reputation: the current malicious listings should be re-checked against the same sources before any reassessment.
• Domain history: the domain is about six weeks old, so no long operating record supports it.

Summary Verdict

The overall posture is critical. Independent threat detections and a phishing designation, on a domain with almost no operating history, outweigh every neutral technical signal. Legitimacy cannot be inferred, and the site should be regarded as a probable phishing or malicious-content risk.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server was not observable, so the actual hosting location cannot be independently confirmed. Bot protection was active during analysis. Such protection is a minor mitigating factor only and cannot offset the reputation findings. Content behind an edge network can also be swapped quickly without any visible change in hosting.

Closing Assessment

The domain should not be used for login, credential entry, wallet connection, or any payment or financial activity. At most it could be viewed passively from a protected, isolated environment, and links to it received by message or advertisement should be reported and deleted.