Verdict
headwayapp.co appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Marketing/landing page for Headway, a changelog SaaS product offering a widget, public/private changelog pages, integrations, and paid Pro features. Includes pricing, testimonials, and company contact/address. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 11 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Not Scam.
- Domain age: more than 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
Headway is a software-as-a-service website presenting a hosted product-update and customer-communication service for businesses, with a professional landing page, feature demonstrations, pricing, testimonials, and account access.
Scam/Impersonation Risk
No contradictions were observed: the available evidence shows no phishing, impersonation, blacklist, or malicious-reputation finding. The homepage describes a conventional subscription SaaS model, including public and private changelog pages, an embeddable widget, integrations, a free tier, and a Pro plan priced at $29 per month with features such as whitelabeling, custom domains, and team management. This coherent commercial model, established domain history, strong traffic footprint, and clean external reputation are consistent with an established, apparently legitimate site. Behavioral testing recorded two suspicious inline scripts and substantial DOM change activity after interaction; these are technical anomalies without an associated login form, hidden sensitive form, wallet activity, cloaking, or confirmed abuse pattern, so they do not establish impersonation or fraud.
- The homepage presents Headway as a changelog SaaS product with public/private changelogs, an in-product widget, integrations, testimonials, and subscription pricing.
- External reputation checks recorded 0 malicious results, 0 suspicious results, no malicious safe-browsing finding, and no blacklist finding; the domain is ranked 34037 and is within the top 1 million websites.
- Domain registration records show creation on 2015-07-22 and an age of 11.08 years, with registration through Amazon Registrar, Inc.
Regulatory Verification Notes
The site appears to sell software subscriptions rather than a regulated financial service, and its content includes privacy, contact, company-address, pricing, and product information. No regulated licence or registration number is identified in the supplied site evidence; for this business model, that is a disclosure and merchant-identity verification point rather than evidence of a scam. The real-world operator remains independently unverified, so the site's apparent legitimacy should not be treated as proof of a particular legal entity. A high page-authority signal, established traffic presence, stable technical operation, and mainstream certificate and hosting arrangements provide affirmative support for the site's established character.
- The landing page identifies the product, commercial subscription model, testimonials, privacy information, and company contact/address details.
- The website is served through AS14618, Amazon-AES — Amazon.com, Inc., US.
- The transport certificate is issued by YE1, uses domain validation (DV), and is valid through 2026-09-28.
- The domain uses Amazon Registrar, Inc., with registration expiration recorded as 2027-07-21.
What to Verify Next
Before credential or payment interactions, an enterprise or consumer counterparty should independently confirm the operating company and its contact channels, review the applicable terms, privacy, cancellation, and refund provisions, and use payment methods that provide appropriate dispute and payment protection. Any material subscription commitment should be matched against the billing entity shown at checkout and in transaction records.
- The homepage supplies product and pricing information that can be compared with the final subscription and billing terms.
- The site's privacy and contact information provide reference points for independent confirmation of the operating entity and support channels.
- The presence of account access and paid subscription features makes independent merchant-identity and payment-protection checks relevant before transactions.
Summary Verdict
The overall posture is high trust and low risk, with the evidence consistent with an established, apparently legitimate website and no observed scam or impersonation contradictions. Confidence in the classification is strong enough for normal business consideration, while the operator’s real-world identity remains unconfirmed.
Infrastructure Integrity
The website is protected by AWS CDN/WAF infrastructure, and all observed addresses were CDN edge addresses rather than identified origin servers. This provides a meaningful mitigation against direct origin exposure and common service-abuse patterns, but remains a protective technical control rather than proof of ownership or legitimacy.
Closing Assessment
Normal evaluation may proceed, subject to ordinary independent checks of the merchant identity, contractual terms, and payment protections before credentials or payment details are submitted.
Written analysis generated 2026-08-17 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of headwayapp.co.
- The request stayed on headwayapp.co. It was not redirected to another domain. Clear
- Registration is published under Amazon Registrar, Inc.. Clear
- DNS for this domain is served by awsdns-16.com, across 4 name servers. Noted
- The registration is paid up to 2027-07-21. Noted
- It is hosted on AMAZON-AES, from a server in US. Noted
Domain intelligence
| Registrar | Amazon Registrar, Inc. |
|---|---|
| Hosting | AMAZON-AES - Amazon.com, Inc., US |
| Country | US |
| Server IP | 18.214.52.112 |
| Name servers | NS-135.AWSDNS-16.COM, NS-1672.AWSDNS-17.CO.UK, NS-1450.AWSDNS-53.ORG, NS-642.AWSDNS-16.NET |
| SSL issuer | YE1 |
| SSL expiry | 2026-09-28 |
| Domain age | 11.08 years (continuous registration) |
| Domain expiry | 2027-07-21 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about headwayapp.co at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.