Verdict
coronavirus.app is moderately trusted.
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
| What this site appears to be | Public-facing COVID-19 dashboard showing worldwide case counts, an interactive map, graphs, and an option to become a member. No evident financial transaction flows or credential-harvesting forms in the provided HTML. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | 6.6 years oldRegistered history | Clear |
| Web archive | Archived since 2020798 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WR3 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2020.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website is a public-facing COVID-19 information dashboard presenting worldwide case counts, an interactive map, comparative views, graphs, embeddable data, and an optional membership feature. Its apparent purpose is to provide public-health statistics and related personalization or engagement services rather than financial products.
Scam/Impersonation Risk
The site’s visible content is broadly consistent with an informational dashboard: the supplied page contains no evident financial transaction flow, sensitive form, or credential-harvesting form, and no page-level brand-impersonation indicators were identified. However, this benign presentation is outweighed by a confirmed blacklist signal and four malicious detections in external reputation checks, creating a material contradiction for sensitive interaction. Runtime analysis also observed unusual external-activity and post-interaction navigation characteristics, although no cloaking, wallet-drainer, clipboard-hijacking, or hidden-form behavior was detected. The abuse reports associated with the delivery address are discounted because they apply to shared CDN infrastructure rather than being attributed specifically to this website.
- The public map page presents worldwide COVID-19 statistics, interactive mapping, graphs, comparison, and embed functions without a sensitive input form.
- External reputation checks recorded 4 malicious detections and a blacklist hit for the domain.
- The domain registration record shows creation on 2020-01-25 and an age of 6.57 years.
- Web-archive records show 798 snapshots from 2020-01-31 through 2026-05-14, covering 7 years.
Regulatory Verification Notes
The available public content does not clearly identify a legal operating entity, licensing authority, or registration number. Because the apparent business model is an informational dashboard with optional membership rather than an identified regulated financial service, this is principally a governance and disclosure gap requiring verification, not standalone proof of fraud. The operator’s real-world identity remains unverified. The registration record names GoDaddy.com, LLC as registrar, which is an administrative infrastructure fact and does not independently establish the operator’s legitimacy.
- The captured public dashboard does not display a corporate legal name, license authority, or registration number.
- The page’s stated model is public COVID-19 statistics with optional membership or personalization, not an expressly identified regulated financial activity.
- The domain registration record lists GoDaddy.com, LLC as registrar and an expiration date of 2027-01-25.
What to Verify Next
Before any account-related interaction, an independent source should confirm the operator’s legal identity and establish whether membership involves payment or collection of personal information. Any applicable privacy, membership, refund, and data-provenance terms should be obtained from an independently verified official channel rather than relying solely on the dashboard. The reported statistics should be corroborated against authoritative public-health sources, and the site’s official support channels should be confirmed through an offline or independently sourced route.
- The page capture includes controls labelled “Become a member,” “Already a member?,” “Sign in,” “Preferences,” and “Install.”
- The interface uses Leaflet, Progressier, and OpenStreetMap attribution for its dashboard presentation.
- No external links or social-domain references were identified in the supplied page analysis.
Summary Verdict
The overall posture is moderate trust with elevated risk for sensitive interaction. The site appears informational and technically functional, but that apparent purpose does not resolve the confirmed external reputation contradiction or the lack of independently verified operator identity. The available evidence therefore supports limited confidence rather than a reliable basis for sensitive engagement.
Infrastructure Integrity
The website is delivered through Fastly CDN/WAF infrastructure, which provides a meaningful protective layer but is not proof of site legitimacy. All observed addresses were CDN edges, and the origin server was not observable in the analysis, limiting independent assessment of the underlying host.
- Served from AS54113, FASTLY - Fastly, Inc., US; observed edge IPs were 151.101.1.195 and 151.101.65.195.
- The transport certificate was issued by WR3 with DV validation and is valid to 2026-11-07T19:56:10+00:00.
- Infrastructure resolution identified 2 CDN edge IPs and 0 likely origin IPs.
Closing Assessment
Passive viewing of publicly displayed information may be retained as the limited-use case, but account login, credential submission, membership payment, and other sensitive actions should be deferred until the operator and relevant data-handling arrangements are independently confirmed.
Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, behaviour in a sandbox.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 151.101.1.195 (Fastly, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of coronavirus.app.
- The request stayed on coronavirus.app. It was not redirected to another domain. Clear
- Registration is published under GoDaddy.com, LLC. Clear
- DNS for this domain is served by domaincontrol.com, across 2 name servers. Noted
- The registration is paid up to 2027-01-25. Noted
- The earliest public archive of this site is from 2020-01-31. Clear
- It is hosted on FASTLY, from a server in US. Noted
Domain intelligence
| Registrar | GoDaddy.com, LLC |
|---|---|
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 151.101.1.195 |
| Name servers | ns09.domaincontrol.com, ns10.domaincontrol.com |
| SSL issuer | WR3 |
| SSL expiry | 2026-11-07 |
| Domain age | 6.57 years (continuous registration) |
| Domain expiry | 2027-01-25 |
| Archive first seen | 2020-01-31 |
| Archive snapshots | 798 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about coronavirus.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.