---
title: "Is apps-midnight.web.app a Scam? Trust Score 8/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "apps-midnight.web.app"
verdict: "Critical Risk"
title: "Is apps-midnight.web.app a Scam? Risk Report, Score 8/100"
trust_score: 8
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/apps-midnight.web.app
assessed: 2026-10-26
---

# Is apps-midnight.web.app a scam? TrustSniffer's high-risk assessment: 8/100

## Verdict


**Verdict: Critical Risk, trust score 8/100.** apps-midnight.web.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-26 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 3% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear |
| Domain age | 2 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (1 snapshot) | Clear |
| Certificate | Encrypted connection (Issued by WR4) | Noted |

## The page as captured


![Screenshot of the apps-midnight.web.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/apps-midnight.web.app/screenshots/first.png)

_What apps-midnight.web.app served when TrustSniffer captured it on 2026-10-26. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website presents itself, under the title "Midnight | Bringing rational privacy to blockchain", as a web application for a privacy-focused blockchain project. It is served from a free, platform-issued "apps-midnight" subdomain, not from a standalone branded domain. Its apparent purpose is to draw visitors into a blockchain-related application experience under that project name.


### Scam/Impersonation Risk

Independent threat-intelligence engines currently flag this host as malicious or suspicious, and the site is **blacklisted** by those sources. That makes this a confirmed contradiction, and it is decisive for the assessment. The site borrows a blockchain-project brand name on a disposable, platform-issued subdomain. Nothing observed ties it to the real operator of any such project, so the brand association should be treated as unverified. A separate set of abuse reports exists against one of the shared edge addresses serving the site. These reports concern infrastructure used by many tenants. They are a soft reputational signal and not proof of the site's own conduct. The site was also newly established when examined, with almost no archival footprint and no sustained operating history to counterbalance the flags. In the behavioural sandbox, the page restructured itself heavily after interaction, with a very large volume of DOM changes, and it contains multiple external-posting forms. The sandbox did not detect wallet-connection prompts, wallet-drainer behaviour, clipboard tampering, hidden forms, cloaking, or credential posts to external hosts. Those absences limit the observed behavioural harm but do not offset the blacklisting. No conflicting legal identities were found. Evidence:

- Homepage and hosting layer: three threat-intelligence engines classified the host as malicious and one as suspicious, with an external blacklist hit confirmed.
- Domain provenance: the domain is about 0.16 years old (roughly 60 days), with a single archive snapshot dated 2026-08-26 (1 year tracked).
- Homepage behaviour: 4,262 DOM mutations after interaction, 9 external-post forms, and 3 console errors across 3 successful runs.
- Shared edge address: 4 abuse reports from 2 distinct reporters, attributed to shared infrastructure and not discounted.

### Regulatory Verification Notes

The site is not associated with any regulated entity, and no licence, registration number, or named operating company could be tied to it. Governance and ownership opacity are both present, so the real-world operator remains unidentified. This is a verification gap and not itself evidence of wrongdoing. Here it sits alongside confirmed blacklist hits, which gives the gap more weight. No third-party broker-review match exists for this site, so there is no outside reputational context either way. The site's transport encryption is valid, but a domain-validated certificate confirms only control of the hostname. It says nothing about who operates the site or whether it is legitimate. Evidence:

- Transport layer: the TLS certificate was issued by WR4 (DV validation), valid to 2026-12-22 with 57 days remaining.
- Hosting: served from AS54113 (FASTLY - Fastly, Inc., US), with the registry shown as ARIN.
- Homepage: the page carries about 5,649 characters of text, and no licence or registration disclosure was identified.

### What to Verify Next

Before any engagement, confirm through the official channels of the genuine blockchain project that this subdomain is a sanctioned property, reaching those channels by an independently sourced route and not through links on this site. Any claimed operator, licence, or registration should be checked directly with the relevant registry. Official support and contact channels should be confirmed the same way, offline where possible. If a legitimate owner can be identified, the blacklisting should be raised with them, since it may reflect either abuse of the host or a compromise. Evidence:

- Homepage: it uses a project-style brand name on a platform-issued subdomain, with no operator named.
- Domain provenance: the very recent registration and single archive capture leave no independent history to check against.
- Behavioural testing: the external-posting forms found in the sandbox would need to be traced to their destinations before any data entry.

### Summary Verdict

Available evidence supports a clearly cautionary, elevated-risk posture. Confirmed threat-intelligence listings, a very young domain with almost no history, and an unverified operator identity converge on a conclusion that the site cannot currently be treated as trustworthy. The valid encryption and absence of overt wallet-theft behaviour in testing are mitigating details and do not change that conclusion.


### Infrastructure Integrity

The site sits behind Fastly's CDN. Every observed address, one IPv4 and one IPv6, is an edge node, and the origin server was not observable, so independent verification of the underlying host is not possible. This protective layer is a mitigating factor only. It improves availability and delivery but cannot offset the reputation risk, and edge-only visibility can also mask rapid content swaps.


### Closing Assessment

Limit any interaction to passive viewing. Do not log in, connect a wallet, enter credentials, or make any financial transfer through this site until it is cleared and its operator is independently identified.


_Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Behaviour in a sandbox
- The page replaced a large part of its own content after loading. (Behaviour in a sandbox `rule:BEHAV_DOM_CHANGE_HIGH`)
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)

### 05 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### Signals weighed against the site

- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of apps-midnight.web.app.

- The request stayed on apps-midnight.web.app. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2026-08-26. (Clear)
- It is hosted on FASTLY, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | 0.16 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2026-08-26 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 3% confidence, 4 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about apps-midnight.web.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-moonshot-wi6.netlify.app](https://trustsniffer.com/report/portal-moonshot-wi6.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-7hc.netlify.app](https://trustsniffer.com/report/portal-moonshot-7hc.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [amlcrystal-scanner.vercel.app](https://trustsniffer.com/report/amlcrystal-scanner.vercel.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-985.netlify.app](https://trustsniffer.com/report/portal-moonshot-985.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-zuc.netlify.app](https://trustsniffer.com/report/crypto-zuc.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [coolwalletdesktop.app](https://trustsniffer.com/report/coolwalletdesktop.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-ibt.netlify.app](https://trustsniffer.com/report/portal-moonshot-ibt.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [portal-moonshot-cjq.netlify.app](https://trustsniffer.com/report/portal-moonshot-cjq.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [bclnbrh.xyz](https://trustsniffer.com/report/bclnbrh.xyz), another site assessed as critical-risk (Critical Risk, 0/100)
- [wdbzsg.xyz](https://trustsniffer.com/report/wdbzsg.xyz), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer)
- [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses)
- [Stablecoin Freezes, Oct 23, 2026: 8 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-23)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/apps-midnight.web.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/apps-midnight.web.app · assessed 2026-10-26.*