Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
flapshreward.xyz shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 11 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a newly registered domain whose homepage serves only the default "Welcome to nginx!" web-server placeholder, with a very small amount of boilerplate text and no visible brand, product, service or business content. Nothing on the page states a purpose or business model, so it reads as an unconfigured or staged host rather than a finished public-facing site.
Scam/Impersonation Risk
Contradictory signals are present and carry decisive weight. Several independent security engines currently flag the domain as malicious, including two tier-one security vendors, and the aggregate detection level is high enough to trigger a confirmed blacklist condition. The domain is therefore treated as blacklisted. The evidence does not show whether it is being used for phishing, malware delivery or another abuse. The listing is a hard reputational contradiction regardless. The domain name pairs "reward" language with a very recent registration. That pattern is commonly associated with disposable lures, which are often staged as a blank server page until a campaign is activated. This is a pattern observation, not a confirmed finding. The blank placeholder page offers no mitigating context such as a brand, a legal entity or a stated service. No conflicting legal identities or brand-impersonation content were observed, because the page contains no identity content to compare. The cautionary posture rests on the third-party detections and the domain's profile.
- The homepage serves only the default web-server welcome page, with no branding, product description, contact details or legal text.
- The domain was registered on 2026-09-19 (~0.09 years old, about one month) through NICENIC INTERNATIONAL GROUP CO., LIMITED.
- The web archive holds only 2 snapshots, both from 2026 (first seen 2026-09-19, last seen the same day), so there is no meaningful history.
- 11 security engines flagged the domain as malicious and 1 as suspicious, with two tier-one vendors among the detections.
Regulatory Verification Notes
The homepage carries no legal, ownership, licensing or registration information of any kind. The site presents no terms, privacy policy, company name or regulatory status, so no operator can be tied to it. This is a content gap on the site itself. It is not evidence of wrongdoing on its own, but with no disclosures to weigh against the blacklist signal, nothing offsets the adverse findings. No third-party broker or regulatory-registry match was found for the domain, which leaves the entity unattributed. Real-world operator identity is unverified. The site's transport encryption is valid but is only a basic domain-validated certificate, which confirms an encrypted connection and says nothing about who operates the site.
- The homepage lists no company name, address, license or registration number.
- The TLS certificate was issued by YE2 at domain-validation (DV) level and is valid to 2026-12-18.
- The domain is served from AS13335 (Cloudflare, Inc., US).
- No matching broker or regulated-entity record was found for the domain.
What to Verify Next
The domain should be treated as unsuitable for any sensitive interaction until the detections are resolved. Anyone who received a link to this domain, for example in a message, advertisement or "rewards" promotion, should trace its origin through an independent route. That means contacting the supposed sender or brand through an official channel obtained separately, not through anything on or linked from this site. Any organization that claims to operate the site should show the legal entity behind it and, if it offers regulated services, confirm its authorization directly with the relevant registry. Security teams should check whether the domain appears in their own mail, proxy or endpoint logs, and re-test it later to see whether the detections persist or the page content changes.
- The only content on the homepage is the default server placeholder, so no official contact channels can be confirmed from the site.
- The multi-engine malicious detections are current as of this analysis and may change if the site is cleaned or taken down.
- The domain's first and last archive captures fall on the same day in 2026, so any later content change would be an important signal to catch.
Summary Verdict
The overall posture is high risk. Confirmed third-party malicious detections on a one-month-old domain with no identifiable operator and no real content outweigh the technically clean elements of the setup. The site cannot be treated as legitimate and should be handled as a probable threat asset.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge node, so the real origin server could not be observed. Protective infrastructure of this kind is a mitigating factor only. It does not offset the reputational findings. Because the origin is masked, it also prevents independent verification of the true hosting and would let content be swapped quickly behind the same address. A few unconfirmed heuristics note a young domain with sparse subdomains. They are not treated as confirmed risks.
Closing Assessment
Do not log in, enter credentials, connect wallets or make payments on this site, and do not download or open anything it offers. If the domain was reached through an unsolicited message or promotion, discard the link, report it to the sender's official channel, and consider blocking the domain in organizational controls.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of flapshreward.xyz.
- The request stayed on flapshreward.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-19. Noted
- The earliest public archive of this site is from 2026-09-19. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3030::ac43:cb08 |
| Name servers | ANDRONICUS.NS.CLOUDFLARE.COM, LEANNA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-18 |
| Domain age | 0.09 years (continuous registration) |
| Domain expiry | 2027-09-19 |
| Archive first seen | 2026-09-19 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 11 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about flapshreward.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.