Is app.swipix.io safe? TrustSniffer's low-trust assessment: 35/100

app.swipix.io
Download PDF Check another site How we score

Verdict

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

35 OUT OF 100
Low Trust

app.swipix.io is low-trust and potentially risky.

Governance Risk Dynamic Interaction Caution

Assessed 2026-10-20 by automated analysis. Classification confidence 75%.

What this site appears to beLanding page for Swipix, a young social video platform that promises rewards in a token called DOPPY for watching content, inviting friends, and paying for boosts. Lacks verifiable audits, legal disclosures, or clear token economics; potential opaque value flow and monetization via paid boosts.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware enginesNone flagged itVirusTotalClear
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age5 months oldMost scam domains are under a year oldRisk
Web archiveArchived since 20261 snapshotClear
CertificateEncrypted connectionIssued by YE1Noted

The page as captured

No screenshot is retained for this report.

Key findings

  • Automated classification: Governance Risk.
  • Domain age: less than 1 year (registration continuity).
  • Public web-archive history exists since 2026.
  • No flags from the reputation services TrustSniffer consulted at assessment time.

Full analysis

Overview

Swipix appears to be a social video app, presented through a marketing landing page on an "app" subdomain, with the tagline "Watch videos. Train AI. Get Rewards." The page tells visitors that scrolling a video feed, completing tasks and inviting friends will earn rewards paid in a native token called DOPPY. It offers a Google Play download and a multilingual interface covering several dozen languages. The apparent business model is a token-incentivised engagement and referral network, with paid promotional boosts as a likely revenue line. This is an inference from the page content, not a confirmed description of the operator's business.

Scam/Impersonation Risk

No contradictory signals were observed. There is no reputation-list or phishing listing, no sign of brand impersonation, and no conflicting legal identities. Reputation checks of the domain and its delivery network came back clean. That absence does not make the offer itself low-risk. The homepage promises that users are "rewarded back in DOPPY tokens" for watching videos, "training our AI", completing tasks and inviting friends. It says registration is "100% free to start" and needs "no special skills". The page does not say what DOPPY is worth, who issues it, how it is funded, or whether it can be redeemed for anything. The claim that passive scrolling "trains AI" has no technical or commercial explanation. Together these make up an opaque value flow. Paying tokens for referrals and selling paid boosts are also features commonly seen in referral-driven reward schemes, where participant growth rather than a real product funds the payouts. This is a pattern-level concern and not a finding that the site operates as one. The page analysis flags a mismatch between the claims and the evidence, and no clearly defined product. In the browser sandbox, the landing page sent a high share of its traffic and several POST requests to third-party destinations that are not on the known-good list. The cause is unclear. The traffic could come from ordinary analytics, content delivery or app-promotion services, or from something less benign. The sandbox did not establish which. It is therefore noted as a caution and not as a confirmed fault, and it has not been discounted as irrelevant.

Evidence
  • The homepage describes a three-step "How It Works" flow (watch the feed, train the AI, receive DOPPY) with no token terms, supply, audit or redemption mechanism.
  • The homepage lists "Inviting friends" and "Completing tasks" as reward triggers, and the page content references paid boosts, which is consistent with a referral and promotion model.
  • The domain was registered on 2026-05-25 (~0.41 years old). The web archive holds a single snapshot, captured 2026-10-05, covering 1 year of tracked history.
  • The sandbox recorded 13 non-whitelisted external requests, 7 of them POSTs, with external traffic reaching up to 97.2% on some runs. The purpose of these requests is not established.

Regulatory Verification Notes

The site presents no legal entity name, licence, registration number, or whitepaper or audit reference, and the pages reviewed carry no terms or privacy disclosures. The on-page disclosure state is unclear. For a service that issues a token and pays rewards, this is a material disclosure gap. It does not by itself prove misconduct. Identity verification is unverified (score 30, confidence 0.5), and no independent signal connects the site to a real-world brand or person. Registration details do not identify the operator either, so the entity behind the platform remains unconnected to the site, and governance and ownership are opaque. The domain is registered through Marcaria International LLC. No third-party broker or regulator listing was matched, so there is no external reputational signal in either direction. The site makes no claim of regulated status, and none was found independently.

Evidence
  • The homepage and its navigation (Home, About, Economics, Details) show no company name, jurisdiction or licence claim in the captured content.
  • Registrar of record is Marcaria International LLC, with the domain registered 2026-05-25 and expiring 2027-05-25. Owner details are hidden or incomplete.
  • Served via AS13335 (Cloudflare, Inc., US). The TLS certificate is DV-level, issued by YE1 and valid to 2026-12-05.
  • No broker-database match was found for the brand.

What to Verify Next

Before any engagement, the operator should be identified through independent routes. That means confirming through the official Google Play listing who the publisher is and where they are based, and checking whether any company registry or financial regulator in that jurisdiction has a record of the entity. The DOPPY token should be checked for a published contract, supply schedule, independent audit and a verifiable redemption path. Any claim that rewards are convertible should be tested with the smallest possible amount first. The official support and contact channels should be confirmed through a route independent of the site. Independent user reports about reward withdrawals and referral payouts should be reviewed, since the site publishes none.

Evidence
  • The "Economics" and "Details" sections named in the site navigation should be reviewed for actual token terms. The captured homepage text contains none.
  • The site's domain history is under six months old, with one archive capture, so there is no long track record to rely on.
  • The sandbox behaviour analysis shows no wallet-connect or credential-form interactions. Any later token or wallet step would therefore need separate scrutiny.

Summary Verdict

The available evidence supports a low-trust (35.25), caution-first posture, with a classification confidence of 0.75. The site shows no confirmed malicious activity, but it appears to be a new, unverified token-reward project whose operator, economics and obligations are not established. Its technical hygiene is basic and does not offset those gaps.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and the observed addresses are edge nodes, so the origin server was not visible. The edge addresses sit on Amazon's network, while the primary connection is attributed to Cloudflare. The TLS certificate is valid and issued by a known authority, which is an acceptable baseline. This is a mitigating factor only. It supports availability and transport security but is not evidence of who operates the site or whether the operator is legitimate. Edge-only visibility also prevents independent hosting verification.

Closing Assessment

Browsing the landing page for information is reasonable, but account creation, token claims, referral activity and any payment or boost purchase should wait until the operator and token terms are independently confirmed. Any early participation should be limited to amounts that can be lost without consequence.

Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

4 findings contributed to this verdict, raised by hosting and network, page content, history in the web archive, several checks together.

01 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D

02 Page content

  • The page content shows three or more warning signs that deceptive sites commonly use.Page content rule:PAGE_RED_FLAGS_STRONG
  • The review of the page content rated it moderate risk.Page content rule:PAGE_RISK_MED
  • The page content shows at least one warning sign that deceptive sites commonly use.Page content rule:PAGE_RED_FLAGS_SOME

03 History in the web archive

  • The web archive has almost no record of this domain, which fits a site that is new.History in the web archive rule:ARCH_PEN_YOUNG_AND_SPARSE

04 Several checks together

  • No external feed lists the site, but its own page content reads as risky.Several checks together rule:HYB_POSITIVE_EXTERNAL_NEGATIVE_PAGE

Identity verification

StatusUNVERIFIED
Identity score30/100
Identity verification confidence50%
  • No on-site identity signals detected

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of app.swipix.io.

  • The request for app.swipix.io ended on swipix.io, a different domain. Watch
  • Registration is published under Marcaria International LLC. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-05-25. Noted
  • The earliest public archive of this site is from 2026-10-05. Clear
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarMarcaria International LLC
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3035::ac43:b277
Name serversleia.ns.cloudflare.com, memphis.ns.cloudflare.com
CDN / edge networkDetected (cloudflare)
Resolved IP addresses12
Edge IP addresses12
Likely origin IP addresses0
SSL issuerYE1
SSL expiry2026-12-05
Domain age0.41 years (continuous registration)
Domain expiry2027-05-25
Archive first seen2026-10-05
Archive snapshots1
ReputationVirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about app.swipix.io at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about app.swipix.io

Is app.swipix.io a scam?

TrustSniffer found several risk patterns on app.swipix.io. It scored 35 out of 100 on 2026-10-20, a low-trust result. That is not proof of fraud: it means the evidence did not support treating the site as safe.

Is app.swipix.io safe to use?

Several risk patterns were present. Do not send money or personal details until you have verified this business another way.

What is the trust score of app.swipix.io?

app.swipix.io scored 35 out of 100 on 2026-10-20, which places it in the low-trust band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-20 · how we assess · report a mistake