---
title: "Is alacartapps.co Legit? Trust Score 100/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "alacartapps.co"
verdict: "High Trust"
title: "Is alacartapps.co Legit? Trust Score 100/100"
trust_score: 100
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/alacartapps.co
assessed: 2026-08-03
---

# Is alacartapps.co legit? TrustSniffer's high-trust assessment: 100/100

## Verdict


**Verdict: High Trust, trust score 100/100.** alacartapps.co appears legitimate.

Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.

Labels: Not Scam, Low Risk

Assessed 2026-08-03 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | Marketing page for Wrapped, a subscription Shopify app providing customizable gift wrapping, gift messages, checkout integration, order-management features, analytics, and merchant upselling tools. It presents detailed plan pricing, a free trial, feature comparisons, reviews, support links, and legal-policy links. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | None flagged it (VirusTotal) | Clear |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 3 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 4.5 years old (Registered history) | Clear |
| Web archive | Never archived (No public history of this site) | Watch |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


No screenshot is retained for this report.

## Key findings


- Automated classification: Not Scam.
- Domain age: 3 to 10 years (registration continuity).
- VirusTotal and Google Safe Browsing had no flags for this domain; its hosting IP carries AbuseIPDB reports below the confidence level TrustSniffer treats as a flag.
- The operator behind the site could not be independently connected to a real-world brand or person.

## Full analysis


### Overview

The website presents Wrapped, an established subscription-based Shopify application that enables merchants to add customizable gift wrapping, personal messages, checkout integration, order-management features, analytics, and related upsells. Its commercial model is clearly presented through monthly plans ranging from $19 to $149, annual billing options, and a seven-day free trial.


### Scam/Impersonation Risk

No identity contradictions, phishing indicators, brand impersonation, or malicious behavior were observed. The homepage presents a coherent Shopify-software proposition supported by detailed feature comparisons, pricing, customer reviews, installation routes, and consistent branding. Interactive testing found no hidden forms, credential-collection mechanisms, suspicious scripts, cloaking, wallet interactions, or clipboard manipulation. The domain is established and has a clean external threat-reputation profile, supporting the conclusion that this is a legitimate commercial website rather than an imitation or deceptive storefront.

- The homepage identifies the product as “Wrapped,” describes it as “Built for Shopify,” and reports a 4.9-star Shopify App Store rating, more than 13,000 stores, and a two-minute setup process.
- The homepage contains one newsletter-email form; it has no login form, sensitive form, hidden form, or untrusted submission destination.
- External reputation checks recorded 0 malicious and 0 suspicious detections, with no malicious safe-browsing finding or confirmed threat-list match.
- The domain was registered in 2022 (~4.55 years old) through Gandi SAS and is registered through 2027.

### Regulatory Verification Notes

The observed business is ordinary ecommerce software rather than a financial, investment, brokerage, or crypto service, and the website makes no corresponding regulated-service claim. Licensing is therefore not presented as part of its commercial proposition. The homepage provides support and legal-policy links, although the supplied page evidence does not establish the legal entity details contained within those documents. Registration privacy is an administrative domain-management detail and does not detract from the converging legitimacy signals.

- The homepage classifies the offering through its content as Shopify ecommerce software and provides links to support and legal-policy resources.
- The homepage discloses plan pricing, annual-billing availability, trial duration, and feature comparisons rather than promising financial returns or investment outcomes.
- The site is served from AS209242 (CLOUDFLARESPECTRUM - Cloudflare London, LLC, US).
- The site’s transport encryption uses a WE1-issued domain-validated TLS certificate, valid until 2026-10-14.

### What to Verify Next

Enterprise procurement should confirm that the Shopify installation destination corresponds to the official Wrapped App Store listing, review the linked terms and privacy policy for the contracting entity, data-processing responsibilities, renewal terms, and cancellation mechanics, and validate support channels through the application marketplace before organizational deployment. A technical implementation review should also establish the Shopify permissions requested by the application and whether those permissions are proportionate to the intended gifting and order-management functions.

- The homepage provides an “Install on Shopify” route that can be reconciled with the marketplace publisher identity during procurement.
- The homepage advertises checkout integration, analytics, customization, and order-management capabilities, making application-permission review relevant to deployment.
- The homepage offers monthly and annual subscription arrangements, supporting review of renewal and cancellation provisions.
- The homepage includes support and legal-policy links suitable for contractual and privacy due diligence.

### Summary Verdict

The website has a high-trust posture and is assessed as a legitimate, established commercial SaaS presence. Its identity, content, behavior, reputation, and technical operation are mutually consistent, with no contradictory risk signals observed.


### Infrastructure Integrity

The website uses Cloudflare CDN/WAF protection, with the observed address operating as an edge endpoint rather than a directly exposed origin. This mainstream protective architecture reduces direct infrastructure exposure and is an appropriate mitigating control, although infrastructure protection alone is not evidence of business legitimacy.


### Closing Assessment

Normal interaction, including account access, installation evaluation, and standard use, is appropriate, subject to routine enterprise procurement and application-permission review.


_Written analysis generated 2026-08-03 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found


No rule findings contributed to this verdict.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 25% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of alacartapps.co.

- The request stayed on alacartapps.co. It was not redirected to another domain. (Clear)
- Registration is published under Gandi SAS. (Clear)
- DNS for this domain is served by awsdns-07.com, across 4 name servers. (Noted)
- The registration is paid up to 2027-01-13. (Noted)
- It is hosted on CLOUDFLARESPECTRUM, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Gandi SAS |
| Hosting | CLOUDFLARESPECTRUM - Cloudflare London, LLC, US |
| Country | US |
| Server IP | 198.202.211.1 |
| Name servers | NS-56.AWSDNS-07.COM, NS-1235.AWSDNS-26.ORG, NS-1951.AWSDNS-51.CO.UK, NS-705.AWSDNS-24.NET |
| SSL issuer | WE1 |
| SSL expiry | 2026-10-14 |
| Domain age | 4.5 years |
| Domain expiry | 2027-01-13 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 3 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about alacartapps.co at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [lampost.co risk report](https://trustsniffer.com/report/lampost.co) (High Trust, 100/100)
- [cryptocurrencyjobs.co risk report](https://trustsniffer.com/report/cryptocurrencyjobs.co) (High Trust, 100/100)
- [smartretail.co risk report](https://trustsniffer.com/report/smartretail.co) (High Trust, 100/100)
- [cool.co risk report](https://trustsniffer.com/report/cool.co) (High Trust, 93/100)
- [shopmiraclebrand.co risk report](https://trustsniffer.com/report/shopmiraclebrand.co) (High Trust, 90/100)
- [fundapps.co risk report](https://trustsniffer.com/report/fundapps.co) (High Trust, 100/100)
- [ninjaxpress.co risk report](https://trustsniffer.com/report/ninjaxpress.co) (High Trust, 100/100)
- [haryana.gov.in risk report](https://trustsniffer.com/report/haryana.gov.in) (High Trust, 100/100)
- [tvfoco.correiobraziliense.com.br risk report](https://trustsniffer.com/report/tvfoco.correiobraziliense.com.br) (High Trust, 94/100)
- [mall.iopenmall.tw risk report](https://trustsniffer.com/report/mall.iopenmall.tw) (High Trust, 91/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as legitimate](https://trustsniffer.com/directory/verified-legit)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [The Malware Hidden Inside Minecraft Mods](https://trustsniffer.com/blog/minecraft-mod-malware)
- [Stablecoin Freezes, Sep 29, 2026: 9 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-29)
- [Stablecoin Freezes, Sep 28, 2026: 24 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-28)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/alacartapps.co) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/alacartapps.co · assessed 2026-08-03.*