exfil.app Safety Check: Legit or Scam? Score 15/100

Strong risk indicators found. We advise against using this site.

Automated checks on September 24, 2026 covered: the captured pages, DNS, certificate and registration data, forms and scripts, threat-intelligence feeds.

First analyzed Sep 24, 2026 · Updated Sep 24, 2026

Detailed Analysis Report: Is https://exfil.app/ Safe and Legit? Website Overview and Purpose This report is anchored to the visible homepage experience captured during the scrape. The scraped title was Продать голду Standoff 2 от 500 G: моментальные выплаты . The visible page appears to serve the following purpose: cryptocurrency exchange. Visible on-page text referenced Продать голду Standoff 2 от 500 G: моментальные выплаты EXFIL Продать голду Standoff 2 Сколько голды продаёшь? . The content appears aimed at cryptocurrency traders. In classification terms, the page aligns most closely with financial services and crypto trading characteristics. Content Quality and User Experience Key Experience Highlights The visible landing page itself was captured during the live scrape. The scraped title was Продать голду Standoff 2 от 500 G: моментальные выплаты , which gives a direct signal about what the page presents to visitors. The visible page appears to serve the following purpose: cryptocurrency exchange. The page appears aimed at cryptocurrency traders. No additional internal page content was needed for a baseline view of the visible experience. Observed transparency on accessible pages: contact signals were present and policy signals were limited . Additional observed context from the analysis included: DOMAIN_AGE The domain is only 56 days old, indicating it is relatively new and potentially less trustworthy | TRANSPARENCY Missing contact information, privacy policy, and terms of service raise concerns about the site s legitimacy | SECURITY High-risk scripts detected that could manipulate user data or credentials. Claims Verification and Red Flags Red Flags Detected From a cybercrime and cybersecurity perspective, the visible page content appears commercially transactional and is trying to move the visitor toward a purchase or service-order flow. Those observed behaviors do not prove fraud by themselves, but they do increase the importance of validating operator identity, payment safety, and account-handling practices before trusting the service. Finding: TRANSPARENCY Missing contact information | No email, phone, or address found | Evidence: contact page Finding: SECURITY High-risk scripts detected | Clipboard manipulation and credential exfiltration risks | Evidence: script analysis Finding: DOMAIN_AGE New domain | Only 56 days old | Evidence: domain registration data Finding: TRANSPARENCY No privacy policy or terms of service | Lack of legal documentation | Evidence: site content Caution Points Treat the page as a commercial offer: verify pricing, refund rules, payment handling, and dispute options before paying. Policy pages were not clearly accessible in this scan; request written terms before any payment or account-linked action. Test the listed support channel with a low-risk question before any irreversible payment or account action. Verify operator identity, ownership trail, and off-site reputation before escalating from browsing to payment, login, or installation. Security Note: SSL is valid (issuer: WE1 ), VirusTotal reports 0/unknown detections, WebRisk status is CLEAN , SPF is configured , and DMARC is missing . Legitimacy and Reputation Assessment Technical and reputation evidence is secondary to the page-content review above, but it still matters. Domain age evidence indicates 56 day(s) based on rdap_phase_a . Archive continuity suggests archive continuity could not be verified in this run . Threat-intelligence checks currently show no direct malicious-engine consensus, while WebRisk is CLEAN . Reputation telemetry shows no meaningful Tranco ranking , and visible transparency signals are present for contact details and limited for policy/legal pages. Final Verdict and Recommendations The current result is scam with a trust score of 15/100 . Primary classification from this run: scam with score 15/100 in financial services (crypto trading). Conclusion: Overall risk remains in warning territory, so users should require additional proof before trusting critical interactions. Exercise caution and verify the legitimacy of the platform before engaging in any transactions.

• [CONTACT] Limited Contact Accountability | Contact accountability signals were limited on captured pages.
• SECURITY High-risk scripts detected | Clipboard manipulation and credential exfiltration risks | Evidence: script analysis
• [DOMAIN AGE] Relatively Young Domain | The domain is relatively new compared with established services.
• TRANSPARENCY No privacy policy or terms of service | Lack of legal documentation | Evidence: site content
• SECURITY No DMARC record | Potential email spoofing risk | Evidence: DNS records

• DOMAIN_AGE The domain is only 56 days old, indicating it is relatively new and potentially less trustworthy.
• [CONTACT] Limited Contact Accountability | Contact accountability signals were limited on captured pages.
• SECURITY High-risk scripts detected that could manipulate user data or credentials.
• SSL_VALID The site has a valid SSL certificate, which is a positive sign but not sufficient for trust.

Is exfil.app a scam?

ScamMinder's automated checks on September 24, 2026 rated exfil.app Very High Risk, 15/100. They did not establish a scam. We advise against using this site.

Is exfil.app safe?

ScamMinder rated exfil.app Very High Risk, 15/100, on September 24, 2026. Strong risk indicators found. We advise against using this site.

What is the trust score of exfil.app?

exfil.app has a ScamMinder trust score of 15/100 (Very High Risk) from automated checks on September 24, 2026. The score is a trust index built from the evidence we could observe, not a probability.