Verdict
floppaclient.com shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | A project page for Floppa Client, a free Fabric 26.3 mod for Hypixel Skyblock dungeons. Describes features, modules, installation steps, downloads, and an FAQ. States it is not affiliated with Mojang or Hypixel. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 5 months oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is a project and download page for Floppa Client, a free Fabric mod for Minecraft Hypixel Skyblock dungeons. It presents feature descriptions, gameplay demonstrations, installation guidance, downloads, and an FAQ, with an apparent purpose of distributing a game-enhancement client rather than selling financial or subscription services.
Scam/Impersonation Risk
The site presents a coherent software-project narrative and expressly states that it is not affiliated with Mojang or Hypixel; the supplied page evidence does not identify conflicting legal names, a login form, hidden forms, or confirmed brand impersonation. However, this benign page presentation is outweighed by a direct external contradiction: the domain is blacklisted by two external sources, with four malicious and two suspicious detections recorded, including detections from Fortinet and Sophos. The downloadable software model also creates a material executable-content risk: the site promotes automation, secret finding, terminal solving, ESP/XRay functions, movement manipulation, and other game-client capabilities, so the absence of suspicious browser behavior does not establish that the downloaded file is safe. The appropriate posture is to treat the site and its downloads as unsafe for sensitive interaction or execution until independently validated.
- External reputation telemetry records four malicious and two suspicious detections, with threat detections from Fortinet and Sophos; the domain is also recorded as blacklisted.
- The homepage presents a free game-mod project and states that it is not affiliated with Mojang or Hypixel, but this disclosure does not resolve the external blacklist contradiction.
- Domain registration telemetry records creation on 2026-05-06, with an age of approximately 0.38 years.
Regulatory Verification Notes
This is not presented as a regulated financial service, and no licensing claim is relevant to the stated software-project purpose. The available site content does not provide an independently verified operator identity, corporate legal name, registration number, or software-publisher verification; the ownership position is therefore opaque and the site's identity remains unverified. The named registrar is Web Commerce Communications Limited dba WebNic.cc, but registrar information alone does not establish the operator's legitimacy. A valid transport certificate and identified hosting infrastructure are technical controls, not evidence that the publisher or downloaded software is trustworthy.
- The homepage provides a project description and affiliation disclaimer but does not supply a verified legal operator identity or registration details in the supplied content.
- Registration telemetry identifies Web Commerce Communications Limited dba WebNic.cc as registrar and records the domain as created on 2026-05-06.
- Hosting telemetry records service from AS214351, associated with FEMOIT - FEMO IT SOLUTIONS LIMITED, GB.
- TLS telemetry records a DV certificate issued by YR1, valid until 2026-12-20 14:08:22 UTC.
What to Verify Next
Before any download or execution, an enterprise or prospective user should independently confirm the publisher through an established, offline or independently sourced project channel; obtain a cryptographic hash or signature for the file; and compare the file against multiple current malware-scanning results. The relevant game or modding community should also be checked for an independently corroborated project owner and any reports concerning the specific release. Credential use, account login, and execution on a production or personal system should remain excluded unless those checks produce consistent results.
- The site supplies installation and download functionality for a software project, making publisher attribution and file-integrity verification the primary validation controls.
- The available behavioral evidence records no login form, hidden form, wallet activity, clipboard hijacking, or external XHR activity, but those observations do not validate the downloaded executable.
- The external detections and blacklist status require independent confirmation before the site is treated as an approved software source.
Summary Verdict
The overall posture is critical trust risk with a material sensitive-interaction concern. The available content is internally coherent as a game-mod project, but the confirmed external threat detections and blacklist status take precedence over the site's presentation and prevent the website from being treated as a trusted software source.
Infrastructure Integrity
The site is protected by Cloudflare CDN/WAF infrastructure, and the observed address is an edge address rather than an independently observable origin. This reduces direct exposure of the origin and can mitigate routine network attacks, but it also limits independent hosting verification and cannot offset the external reputation findings.
Closing Assessment
The site should not be approved for credential use, sensitive interaction, or software execution unless independent publisher verification, file-integrity validation, and current malware-analysis checks resolve the recorded threat indicators.
Written analysis generated 2026-09-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of floppaclient.com.
- The request stayed on floppaclient.com. It was not redirected to another domain. Clear
- Registration is published under Web Commerce Communications Limited dba WebNic.cc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-05-06. Noted
- It is hosted on FEMOIT, from a server in SC. Noted
Domain intelligence
| Registrar | Web Commerce Communications Limited dba WebNic.cc |
|---|---|
| Hosting | FEMOIT - FEMO IT SOLUTIONS LIMITED, GB |
| Country | SC |
| Server IP | 196.251.107.204 |
| Name servers | ANDY.NS.CLOUDFLARE.COM, BRENNA.NS.CLOUDFLARE.COM |
| SSL issuer | YR1 |
| SSL expiry | 2026-12-20 |
| Domain age | 0.38 years (continuous registration) |
| Domain expiry | 2027-05-06 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about floppaclient.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.