Is orbitrelaydata.sbs a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at orbitrelaydata.sbs is a very recently created domain that presents almost no visible content to a visitor. The captured homepage returned only a minimal text fragment, with no named products, corporate identity, or described service. Its apparent purpose therefore cannot be established from the site itself, and the evidence points to a throwaway or staging-style web property rather than an established business.

Scam/Impersonation Risk

Multiple independent threat-intelligence engines currently flag the domain as malicious or suspicious, and it also appears on an external blacklist. This is a confirmed blacklist condition, not a soft reputational signal. The behavioral sandbox observed no wallet-drainer routines, clipboard hijacking, hidden forms, or cross-origin credential posts. That absence does not offset the external detections, because a page showing almost no content gives such mechanisms little to act on during a short observation window. The domain was registered only weeks ago, and the hosting pattern shows short-lived, fast-flux-like characteristics. This is a typical profile for infrastructure staged ahead of phishing or malware campaigns. No conflicting legal identities were found, and no specific brand impersonation was observed. The risk therefore rests on the blacklist and detection signals combined with the domain's extreme youth. Evidence:

• Homepage: the captured page contained only a minimal text fragment, with no products, services, or corporate details.
• Domain provenance: registered 2026-09-09 (~0.12 years old, 42 days), with 25 archive snapshots, all in 2026 (1 year tracked).
• External reputation: 7 engines rated the domain malicious and 2 suspicious, and an external blacklist hit was recorded.
• Sandbox behavior: 3 of 3 runs succeeded with no external network activity, 0 cloaking, and 3 console errors.

Regulatory Verification Notes

The site exposes no identifiable legal, terms, about, or licensing pages, so there is no operator name, registration number, or regulator reference to assess. Because the homepage carries virtually no content, this is a content gap and not an accusation in itself. A third-party broker-reputation lookup returned no match. The absence of a match carries no weight either way and is not a licensing verdict. The domain sits on a low-cost, high-abuse-prevalence top-level domain. Its registration is recent and was made through a mainstream registrar. The transport-encryption certificate is a basic domain-validated one, which confirms only that the connection is encrypted and says nothing about the operator. Evidence:

• Registrar: NameSilo, LLC; registration runs to 2027-09-09.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (DV), valid to 2026-12-08 (47 days remaining).
• Legal and licensing pages: none observable on the captured site.

What to Verify Next

Any interaction should wait until the external detections are cleared or independently explained. Confirm whether the domain is referenced by an actual organization, such as in official communications, an authoritative company website, or a regulator's register, rather than by the domain's own claims. If a message, advertisement, or invitation directed a visitor here, trace it back to its sender through an independent offline channel. Confirm the official support and contact channels the same way. Re-test the domain after a few weeks for changes in content, detections, and blacklist status, since the site is too new to have a stable record. Evidence:

• Domain age: registered 2026-09-09, so no long-term operating record exists to lean on.
• External listings: the current detections and blacklist hit are the primary items to re-check.
• Homepage: no identifying organization or regulator reference is published to verify against.

Summary Verdict

The assessment is clearly cautionary. Confirmed external threat detections and a blacklist listing, together with the domain's extreme youth and the absence of any substantive or verifiable content, outweigh the technically valid but basic security configuration. The site cannot be treated as a legitimate or trustworthy destination at this time.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. No origin server was observable. This is a mitigating factor only, because it shows the domain is configured conventionally and protected against basic attacks. Edge-only visibility also prevents independent verification of the real hosting and allows content to be swapped quickly. Shared edge infrastructure does not offset the reputation risk, and the infrastructure carries no abuse reports of its own.

Closing Assessment

Treat the site as unsafe for any sign-in, credential entry, wallet connection, or payment. Avoid downloading files from it. Limit any contact to non-interactive viewing, and only if there is a specific need, until the threat listings are independently resolved.