Is xalienslabs.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at xalienslabs.info is a very recently registered .info domain whose front page, when visited by automated analysis, returned a security interstitial titled "Suspected Phishing" instead of any site content. It therefore presents no observable products, services or business model, and its purpose cannot be established from what it shows a visitor. Only a short fragment of text was retrievable.

Scam/Impersonation Risk

Contradictory signals are present and serious. Several independent major threat-intelligence engines currently flag the domain as malicious or suspicious, and it is blacklisted by external reputation sources. A reputational warning page was served in place of the content. No brand impersonation and no conflicting legal identities were observed. The domain's own content could not be reviewed, so this is not a finding about what the site says. The risk rests on external threat detections and on the domain's profile: it is young, has almost no history, and is closely tied to warnings of malicious use. Behavioral testing showed an overwhelmingly third-party traffic pattern, with nearly all requests going to external destinations, many background calls and external submissions, and heavy page rewriting after interaction. None of these destinations fell outside recognized services, and no wallet-connection prompts, clipboard tampering, hidden forms or credential-capturing external forms were seen. This neither confirms nor clears malicious intent, but it does not offset the blacklist evidence. No suspicious contact address was observed. Evidence:

• Domain registered in July 2026, about 0.32 years (~4 months) old, via NICENIC International Group Co., Limited. The registration is under a year old.
• One archive snapshot, dated 6 July 2026, spanning 1 year tracked. This shows effectively no established history.
• Behavioral runs on the homepage recorded 37 external background requests, 9 external POST submissions, a peak external share of about 95.8%, 26 console errors, and up to 872 page mutations after interaction. No non-whitelisted external destinations were involved.
• The homepage returned an access-denied status (403) and a "Suspected Phishing" interstitial rather than its content.

Regulatory Verification Notes

No legal, terms, privacy or about content could be captured, so no operator name, licence, registration number or jurisdiction can be assessed. The site's ownership details are also incomplete, which is an administrative limitation and not an identity contradiction. No third-party broker or regulatory listing matched this domain. The classification therefore rests on threat-intelligence signals and not on any licensing finding. The site's identity as a real-world business or person is unverified. The valid transport encryption is a basic hygiene control and does not indicate legitimacy. Evidence:

• Served from AS13335 (Cloudflare, Inc., US).
• The TLS certificate was issued by WE1 as a domain-validated (DV) certificate, valid to 2026-11-29. DV validation confirms only domain control and does not identify the operator.
• The homepage yielded roughly 398 characters of text, with no recoverable disclosures.

What to Verify Next

The site should not be treated as safe for sensitive actions until its external threat listings are resolved. If anyone claims the domain belongs to a named company, they should confirm that through an independent offline route, such as the company's known official website, a published phone number or a regulator's registry. They should not rely on contact details or links found on this site. Any licence or registration the operator claims should be confirmed directly with the relevant public registry. The domain's reputation should also be rechecked later, since a listing can clear if the site was compromised and then cleaned, or can worsen as more detections accumulate. Evidence:

• The homepage content was withheld behind a warning interstitial, so no on-site claims could be checked.
• Active threat detections exist at the domain level, so the current reputation status is the main thing to recheck.
• The domain's very short registration and archive record means no earlier legitimate use can be shown.

Summary Verdict

The available evidence supports a high-risk, clearly cautionary posture. Active external threat detections are decisive and are not offset by the site's technical hygiene or the absence of other contradictions. Identity and purpose remain unverified, and the site's recent origin gives no track record to counterbalance the warnings.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF with a valid TLS certificate. All four observed addresses are shared edge servers, and the origin server is not visible. The infrastructure is mainstream and is a mitigating factor only. It supplies no evidence of the operator's legitimacy and cannot offset the reputation risk. It also prevents independent hosting verification.

Closing Assessment

The site should be used, if at all, for read-only viewing only. No login, credential entry, wallet connection, payment or file download should be attempted until independent reputation sources clear the domain.