Is triaslab-one.pages.dev safe? TrustSniffer's low-trust assessment: 47/100

Overview

This is a project-style website served from a free subdomain on a shared developer-hosting platform, with a name that suggests a software "lab". The visit returned a successful response but no readable page content, so the evidence does not show a product, a service, or a business model. Its apparent purpose therefore cannot be established from the site itself.

Scam/Impersonation Risk

The site shows hard contradictory signals from external reputation sources, and these set the risk posture. Several independent threat-intelligence engines rate the domain as malicious and one more rates it as suspicious. The domain also appears on at least one external blacklist, and that listing corroborates the engine detections. No conflicting legal identities and no brand impersonation were observed. No identity contradiction can be assessed in any case, because no legal or identity pages were captured. The interaction records add one more point of concern. During the three automated sessions, the site sent data by POST to an external destination that is not a recognised, well-known service. This was one of three external POST requests. Several console errors also appeared. In its favour, no wallet-connection prompts, clipboard manipulation, hidden forms, external password forms, fingerprinting or cloaking behaviour were detected. These findings do not prove the owner's intent. They do mean the domain's current reputation is adverse enough that sensitive interaction is inadvisable. Evidence:

• The domain is flagged by multiple threat-intelligence engines as malicious, with a further engine rating it suspicious, and it also appears on an external blacklist.
• Behavioural testing of the homepage recorded an outbound POST to a non-whitelisted external destination, alongside repeated console errors.
• The same testing recorded no wallet-drainer, clipboard-hijack, hidden-form or cloaking activity.
• The domain is about 1.9 years old, with 9 archive snapshots spanning 2024–2026 (3 years tracked). The archive shows continuous but thin history and no sign of the site being repurposed.

Regulatory Verification Notes

No licensing, registration, or legal-entity information could be assessed. The captured homepage exposed no readable content, so no terms, privacy, about, or contact pages were available. No third-party broker or regulatory database matched this domain, so no regulated status is established. The site's technical hygiene is sound and consistent with a functioning, maintained deployment. It uses valid transport encryption, serves stable responses across repeated visits, and has a continuous archive record. That hygiene indicates basic operational competence only. It is not evidence of legitimacy and does not offset the adverse external detections. The real-world operator remains unidentified. Evidence:

• The homepage capture returned HTTP 200 but no readable content, so no identity or licensing disclosures could be reviewed.
• Served from AS13335 (Cloudflare, Inc., US).
• The TLS certificate was issued by WE1 (DV, domain-validated only), valid to 2026-12-19. DV certification confirms control of the domain, not the operator's identity.
• No match was returned in the third-party broker reputation dataset.

What to Verify Next

Anyone who received this address through a message, advertisement or referral should confirm the sender's identity through an independent, offline route before acting. The same applies to the official channels of any organisation the site claims to represent. If the site later presents any licence or registration claim, it should be checked directly in the relevant regulator's public register. The domain's threat-intelligence status should be re-checked before any renewed use, since a listing can lapse after a site is cleaned or can spread further if it is not. Evidence:

• The homepage presented no named operator or organisation, so no identity claim exists to validate.
• The external POST to a non-whitelisted destination should be traced to its owner before any data is submitted.
• The current malicious and blacklist detections should be re-checked for delisting or confirmation.

Summary Verdict

Available evidence supports an elevated-risk posture. Adverse external threat detections and a confirmed blacklist listing outweigh the domain's sound technical basics and continuous archive record. No operator identity is established to counterbalance them. The site is not suitable for sensitive interaction in its present state.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server was not visible. This provides DDoS and transport-layer protection and is a mitigating factor only. It cannot offset the reputation risk. Edge-only visibility also prevents independent verification of the true host and can mask rapid content changes behind a stable address.

Closing Assessment

Interaction should be limited to passive viewing. Account login, credential entry, payments, and wallet or financial actions should be avoided. Files should not be downloaded from the site. Any use should wait until the external detections have been cleared and the operator has been independently identified.