Is zero-trust-lab.org safe?
http://zero-trust-lab.org/
Checked on
How we checked
Coverage: partial · 5 of 6 applicable core capabilities
- Antivirus · not available: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Zero Trust Lab is a brand-new, anonymous technical research site publishing a memory-forensics report on Microsoft Edge — no scam mechanics found, but its operator is unverified.
Zero Trust Lab presents itself as an independent systems and memory forensics outfit and publishes a technical report on whether Microsoft Edge password-manager credentials appear as cleartext in process memory. The site is informational: it asks for no payment, no subscription and no personal data, and the only contact route is an email address on mailbox.org. Technical checks are clean — no threat warning and a valid encrypted connection — but the domain is 0 days old and the operator discloses no company, address or named personnel, so the site's own reputation is unestablished. That combination supports a Low Risk rating rather than a Safe one.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 78/100
Low Risk covers scores 70–84. 1 finding pulled the score down; 3 pushed it up.
What pulled the score down
- ModerateThe site discloses no corporate registration, physical address or named personnel, and its only contact route is an email address on mailbox.org.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning for the site.
- SupportsThe saved TLS check found a valid encrypted connection.
- SupportsThe reviewed page contains no payment, subscription or data-collection flow; outbound links point to Microsoft and MITRE reference material.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
Zero Trust Lab presents itself as an independent systems and memory forensics outfit and publishes a technical report on whether Microsoft Edge password-manager credentials appear as cleartext in process memory. The site is informational: it asks for no payment, no subscription and no personal data, and the only contact route is an email address on mailbox.org. Technical checks are clean — no threat warning and a valid encrypted connection — but the domain is 0 days old and the operator discloses no company, address or named personnel, so the site's own reputation is unestablished. That combination supports a Low Risk rating rather than a Safe one.
A technical report, not a storefront or a login page
The page identifies itself as "ZERO TRUST LAB Independent Systems & Memory Forensics" and frames its work as a strictly defined technical question: whether credentials stored in the Microsoft Edge password manager are exposed as cleartext in process virtual memory at browser startup, while the Windows authentication prompt for viewing passwords is still unconfirmed, or after that prompt is explicitly cancelled.
The report goes on to describe measurements M04, M05 and M08, stating that when a user interacts with the password manager UI and triggers the Windows Security prompt, the tested credentials are already exposed as cleartext in process memory before the user enters or confirms the requested Windows password. This is presented as research documentation, not as a product, download or service offer.
The site explicitly states it is wholly independent and not affiliated with Microsoft Corporation, and that Microsoft, Microsoft Edge and Windows are used solely for factual, descriptive identification of the tested software. That is a normal nominative-fair-use disclaimer for security research.
Clean technical checks, but an unverified operator
On the technical side there is nothing adverse: the browser threat feed returned no threat warning, and the saved TLS check found a valid encrypted connection. The outbound links on the page point to microsoftedge.github.io, learn.microsoft.com and cwe.mitre.org — reference material for the report, with no commercial intent or monetization attached.
The operator side is weaker. The registrable domain is 0 days old, and the only contact route shown is an email address on mailbox.org rather than a domain-owned mailbox. No corporate registration, physical address or named personnel is disclosed, so the identity behind "Zero Trust Lab" remains unknown and its public reputation is unestablished.
A brand-new domain publishing a security claim about a major vendor's product is a pattern worth treating with caution, but nothing in the reviewed evidence shows a scam mechanic, a payment request, a data-collection form or a malicious download. The score reflects that gap between clean technical behaviour and unverified ownership.
Why the score is 78
The saved checks found no material threat, but the evidence was not strong enough for the highest Safe tier. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
ZERO TRUST LAB Independent Systems & Memory Forensics
What the captured page showed
1 observation- 01
ZERO TRUST LAB Independent Systems & Memory Forensics
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Zero Trust Lab | Technical Report EDGE-FOR-2026-11-01
- Meta description
Forensic memory analysis of Microsoft Edge 156.0.4314.58 evaluating cleartext password exposure in main process memory prior to and after canceling the Windows authentication prompt.
Pages we read
- Main page/Read
03 · Investigation Story
Investigation story
What the site claims
Zero Trust Lab | Technical Report EDGE-FOR-2026-11-01
What we observed
The page content was captured and checked; the antivirus check returned no result for this scan.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
No threat category confirmed
Service and business model
Content
Observed behavior
Evidence behind this classification
- 01The registrable domain is 0 days old, so the site has no established history.
- 02The browser threat feed returned no threat warning for the site.
- 03The saved TLS check found a valid encrypted connection.
Web research findings
Independent findings for zero-trust-lab.org, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for zero-trust-lab.org. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainzero-trust-lab.org
- Redirects tozero-trust-lab.org
- Hosted byCloudflare, Inc.
- Referencesmicrosoftedge.github.io · learn.microsoft.com
Domain Timeline
- Nov 1, 2026Domain registered
First appeared in WHOIS records — 0 days old when this review was saved.
- Nov 1, 2026Saved security review — Rated Low Risk
This saved scan found no material threat, but the evidence was not strong enough for the highest Safe tier.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Phone number listed (3.965.030.400).
Domain & Encryption
Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for zero-trust-lab.org.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Analytics and ads
- Cloudflare Web Analytics
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://zero-trust-lab.org/
- 2200https://zero-trust-lab.org/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antivirusunavailable
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The site discloses no corporate registration, physical address or named personnel, and its only contact route is an email address on mailbox.org.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | No usable engine result was saved | Unavailable | No saved finding | Not available |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 1, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 1, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Nov 1, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Nov 1, 2026 |
- Antivirus
- ResultNo usable engine result was saved
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 1, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 1, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 1, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 1, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is zero-trust-lab.org a scam or is it safe?
Is zero-trust-lab.org safe to use?
Is zero-trust-lab.org on any phishing or malware blacklists?
How old is the zero-trust-lab.org domain?
Does zero-trust-lab.org have a valid SSL certificate?
Where is zero-trust-lab.org hosted?
How often is the zero-trust-lab.org report updated?
08 · Final Verdict
Final verdict
Zero Trust Lab is a brand-new, anonymous technical research site publishing a memory-forensics report on Microsoft Edge — no scam mechanics found, but its operator is unverified.
Zero Trust Lab presents itself as an independent systems and memory forensics outfit and publishes a technical report on whether Microsoft Edge password-manager credentials appear as cleartext in process memory. The site is informational: it asks for no payment, no subscription and no personal data, and the only contact route is an email address on mailbox.org. Technical checks are clean — no threat warning and a valid encrypted connection — but the domain is 0 days old and the operator discloses no company, address or named personnel, so the site's own reputation is unestablished. That combination supports a Low Risk rating rather than a Safe one.
09 · Community
Community
Are you the owner of zero-trust-lab.org?Verify and reply