---
title: "Is app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app Safe?"
source: TrustSniffer
type: Website trust & fraud report
subject: "app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app"
verdict: "Low Trust"
title: "app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app: 31/100"
trust_score: 31
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app
assessed: 2026-10-22
---

# app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app: TrustSniffer assessment: 31/100

## Verdict


**Verdict: Low Trust, trust score 31/100.** app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app is low-trust and potentially risky.

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 81 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WR1) | Noted |
| Hosted by | AMAZON-02 (Server in US) | Noted |

## The page as captured


![Screenshot of the app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app/screenshots/first.png)

_What app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a project deployment on a shared application-hosting platform's subdomain. Its homepage carries the title of a Chrome Web Store listing for the Rabby Wallet crypto-wallet browser extension. It appears intended to present itself as the download or landing point for that wallet. The captured page held a substantial amount of text, but its commercial purpose could not be independently tied to the genuine wallet brand or to any identifiable operator.


### Scam/Impersonation Risk

The site carries a **confirmed blacklist-level contradiction**. External threat-intelligence sources currently flag it as malicious or suspicious, and this is the decisive factor in the assessment. The surrounding signals fit a well-known lure pattern. A disposable, auto-generated hosting subdomain presents the title of a official-looking wallet listing, and that title is not a store or brand domain. Wallet-extension branding is a common bait for credential and seed-phrase theft, and a visitor would have no way to tell this page from the genuine vendor's distribution channel. Sandbox testing of the homepage found no outbound requests, wallet-connection prompts, clipboard manipulation, hidden or external password forms, or cloaking. This is a mitigating observation and not an exoneration, because a lure page can be switched to malicious behaviour later. A large volume of abuse reports exists on a shared infrastructure address belonging to the hosting provider. Those reports are attributed to shared platform tenants and are discounted, so they are not counted against this site. No conflicting legal-entity names were observed. Evidence:

- Homepage: the page title replicates a Chrome Web Store listing for Rabby Wallet while being served from a generic hosting-platform project subdomain, not a store or vendor domain.
- Reputation: external threat-intelligence sources register 1 malicious and 2 suspicious detections against the domain, which establishes the blacklist-level signal.
- Homepage behaviour: 3 of 3 sandbox runs completed with zero external network activity, no wallet-provider interaction, and no password or hidden-form exfiltration.
- Shared infrastructure: 81 abuse reports on a Vercel content-delivery IP, with a zero confidence score and a whitelisted status, are treated as discounted shared-provider noise.

### Regulatory Verification Notes

The homepage discloses no regulated-entity status, licence, registered company, or accountable operator, and no independent regulatory source links the site to a licensed business. No third-party broker-reputation match exists. That is neutral context, not a finding. A genuine wallet vendor would normally publish an identifiable organisation and official distribution links. The site's operator therefore cannot be connected to the Rabby brand or to any real-world party. Transport encryption is in place, but it only proves an encrypted channel, not the trustworthiness of the operator. Evidence:

- Homepage: no company name, licence reference, or official-vendor attribution was identified in the captured content.
- Transport security: TLS certificate issued by WR1 at domain-validation (DV) level only, valid to 2026-11-27 (36 days remaining).
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), a mainstream commercial cloud network that does not vouch for the content hosted on it.

### What to Verify Next

Anyone who needs the Rabby Wallet should reach the vendor only through the official website address obtained from an independent source, such as its verified social profiles or the genuine Chrome Web Store entry reached directly from the store. They should not follow a link to this page. Any message, advertisement, or search result that led to this address should be treated as suspect and reported to the platform where it appeared. Any organisation with a business interest in the brand should ask the hosting platform to review this deployment for abuse. Confirm the official support and contact channels offline, through the vendor's own verified publications. Evidence:

- Homepage: the store-listing title is served from a hosting-platform project subdomain, so its presence in the browser address bar is the first check to make.
- Reputation: the current threat-intelligence detections should be re-checked after any platform takedown or clean-up.
- Homepage: the page carries no verifiable official-vendor attribution against which its claims could be checked.

### Summary Verdict

The website sits in a clearly elevated-risk posture. Active threat-intelligence detections, combined with branding that does not match the hosting address and no demonstrable link to a real operator, outweigh the benign sandbox behaviour and the technically valid transport security. The available evidence does not support treating it as a legitimate distribution point for any wallet software.


### Infrastructure Integrity

The site resolves entirely to edge addresses on a major cloud network in the United States, behind a trusted content-delivery and web-application-firewall layer. The origin server was not observable. This infrastructure is a mitigating factor only. It reflects that the platform is reputable, not that the hosted content is, and edge-only visibility makes it harder to verify the hosting independently and allows the content to be swapped rapidly without any visible change in the infrastructure.


### Closing Assessment

Passive viewing at most is acceptable, and only from an isolated environment. No wallet software, browser extension, or file should be downloaded from this site, and no seed phrase, private key, password, or payment detail should be entered on it. A user who has already interacted with the page should revoke any wallet approvals, move funds to a freshly created wallet, and change reused passwords.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by external reputation, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### Signals weighed against the site

- AbuseIPDB: 81 reports on hosting IP 64.29.17.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app.

- The request stayed on app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.3 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 81 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [node-live-6882-d3kx2ei95-vercel-project-key.vercel.app](https://trustsniffer.com/report/node-live-6882-d3kx2ei95-vercel-project-key.vercel.app), a similar name (Low Trust, 30/100)
- [b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app](https://trustsniffer.com/report/b-mp-web3-airdrop-and-nft-tdd1bolt.vercel.app), a similar name (Low Trust, 35/100)
- [bsc-dl663k94x.vercel.app](https://trustsniffer.com/report/bsc-dl663k94x.vercel.app), a similar name (Low Trust, 35/100)
- [bitnestwebapp.vercel.app](https://trustsniffer.com/report/bitnestwebapp.vercel.app), a similar name (Low Trust, 27/100)
- [eth-arbitrage-bot.vercel.app](https://trustsniffer.com/report/eth-arbitrage-bot.vercel.app), a similar name (Low Trust, 31/100)
- [seedify-fund-burn.vercel.app](https://trustsniffer.com/report/seedify-fund-burn.vercel.app), a similar name (Low Trust, 46/100)
- [aave-v2.vercel.app](https://trustsniffer.com/report/aave-v2.vercel.app), a similar name (Low Trust, 27/100)
- [aster-exchange.vercel.app](https://trustsniffer.com/report/aster-exchange.vercel.app), a similar name (Low Trust, 29/100)
- [crypto-o0j.netlify.app](https://trustsniffer.com/report/crypto-o0j.netlify.app), another .app site assessed as low-trust (Low Trust, 27/100)
- [crypto-ens.netlify.app](https://trustsniffer.com/report/crypto-ens.netlify.app), another .app site assessed as low-trust (Low Trust, 25/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/app-web-5605-dj7lzt3so-carmonamarc2-3645s-projects.vercel.app · assessed 2026-10-22.*