---
title: "Is iota--o.web.app a Scam? Trust Score 23/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "iota--o.web.app"
verdict: "Critical Risk"
title: "Is iota--o.web.app a Scam? Risk Report, Score 23/100"
trust_score: 23
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/iota--o.web.app
assessed: 2026-10-27
---

# Is iota--o.web.app a scam? TrustSniffer's high-risk assessment: 23/100

## Verdict


**Verdict: Critical Risk, trust score 23/100.** iota--o.web.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 2 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 3% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by WR4) | Noted |
| Hosted by | FASTLY (Server in US) | Noted |

## The page as captured


![Screenshot of the iota--o.web.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/iota--o.web.app/screenshots/first.png)

_What iota--o.web.app served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

This website is a single-page property published on a shared web-app hosting subdomain. Its homepage is titled "IOTA | Built to Make a Difference", and it presents itself under the IOTA name. The page text is substantial and served normally. The evidence does not establish a specific product, service or business model, so its apparent purpose is brand-led promotion under that name. Nothing independently ties it to the real-world organisation or project behind that name.


### Scam/Impersonation Risk

Contradictory signals are present, and this is the decisive part of the assessment. Several threat-detection sources flag the domain as malicious or suspicious, and these detections amount to a confirmed **blacklist** listing. Independent of that, the analysis recorded a prior phishing-association indicator for the domain, which activated impersonation safeguards. The domain is a brand-styled name on a free, shared hosting namespace, with a doubled hyphen inside the name. That pattern is common among look-alike pages that borrow a well-known project's name, and the evidence does not link the site to the genuine brand. Infrastructure-level abuse reports exist but attach to a shared provider address on the content-delivery network, so they do not on their own implicate this site. They add nothing beyond the direct detections. No conflicting legal entities were found across identity pages. Behavioural testing showed no wallet-connection prompts, clipboard tampering, hidden forms, credential posts to external hosts or content cloaking. That limits what was observed, but it does not offset the external detections. The page also rewrote a large amount of its own content after interaction, which fits a dynamic single-page application but gives limited reassurance given the listing. Evidence:

- Homepage: external threat-detection sources return 2 malicious and 1 suspicious verdicts, against 57 harmless and 33 undetected.
- Domain history: a prior phishing-association indicator is recorded and triggered impersonation safeguards. No confirmed phishing campaign is documented here.
- Homepage behaviour: 3 of 3 test sessions succeeded with no wallet-connect, clipboard-write, hidden-form or external password-form activity. Third-party requests were 3 background calls and 3 form posts, all to allow-listed destinations.
- Homepage behaviour: roughly 2,775 DOM mutations after interaction, indicating heavy client-side rewriting.

### Regulatory Verification Notes

The evidence does not independently connect the site to a real-world operator, brand or regulated entity. No third-party regulatory or broker record matches the domain, and no licensing or registration status could be confirmed. A missing licence on its own is a verification gap, not proof of fraud here. The decisive concern is the confirmed threat listing, not any disclosure shortfall. The homepage was captured successfully, but its identity and governance disclosures remain unclear. Ownership and governance transparency are limited, so the site's claim to the IOTA name cannot be treated as established. Evidence:

- Homepage: the title presents the IOTA brand, but no operator, registration or licence detail was independently corroborated.
- Hosting: served from AS54113 (Fastly, Inc., US) in the US ARIN region.
- Transport encryption: TLS certificate issued by WR4 (domain-validated only), valid to 2026-12-22. This confirms an encrypted connection and says nothing about who runs the site.
- Third-party broker intelligence: no matching record.

### What to Verify Next

Before any engagement, the site's association with the IOTA name should be tested against the project's officially published domain, reached through an independent route such as a previously known, bookmarked source rather than any link on this site. Any claim of affiliation, token distribution or account service should be confirmed through the project's official channels. Official support and contact channels should likewise be confirmed independently. The domain's detections should be re-checked with the relevant threat-intelligence sources, because a listing on a shared hosting namespace can reflect either deliberate abuse or a clean-up that is still pending. Evidence:

- Homepage: branded IOTA content on a free shared-hosting subdomain, not on a dedicated, brand-controlled domain.
- Reputation: current malicious and suspicious detections remain active against this exact hostname.
- Identity: no independent confirmation links the site to a real-world operator.

### Summary Verdict

The overall posture is high risk. Confirmed external threat detections, together with impersonation safeguards triggered by a prior phishing association and an unverified brand claim, outweigh the technically clean transport and behaviour results. The evidence supports caution proportionate to a site with a confirmed listing, not a presumption of legitimacy.


### Infrastructure Integrity

The site is delivered through the Fastly content-delivery network, and every observed address is an edge node. The origin server could not be observed, so hosting cannot be verified independently behind the edge, and content could be swapped quickly without any visible change in infrastructure. This is a mitigating factor only. The edge network is mainstream, and the certificate is valid and chains to a recognised issuer, but neither can offset the reputation risk.


### Closing Assessment

Treat the site as read-only at most. Do not log in, submit credentials, connect a wallet, or make any financial transaction or payment through it. Use only the project's officially published channels for any real interaction.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.

### 01 External reputation
- Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`)

### 02 Behaviour in a sandbox
- The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`)
- The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on. (Behaviour in a sandbox `rule:BEHAV_DOM_DIFF_AFTER_INTERACTION`)

### 03 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### Signals weighed against the site

- AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of iota--o.web.app.

- The request stayed on iota--o.web.app. It was not redirected to another domain. (Clear)
- It is hosted on FASTLY, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | FASTLY - Fastly, Inc., US |
| Country | US |
| Server IP | 2620:0:890::100 |
| Name servers | Not available |
| CDN / edge network | Detected (fastly) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR4 |
| SSL expiry | 2026-12-22 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 3% confidence, 4 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about iota--o.web.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [portal-moonshot-qlv.netlify.app](https://trustsniffer.com/report/portal-moonshot-qlv.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [okxclaim-holdearntokenrewards.netlify.app](https://trustsniffer.com/report/okxclaim-holdearntokenrewards.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-vdl.netlify.app](https://trustsniffer.com/report/crypto-vdl.netlify.app), another .app site assessed as critical-risk (Critical Risk, 2/100)
- [portal-moonshot-0yf.netlify.app](https://trustsniffer.com/report/portal-moonshot-0yf.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-uff.netlify.app](https://trustsniffer.com/report/crypto-uff.netlify.app), another .app site assessed as critical-risk (Critical Risk, 1/100)
- [crypto-a0y.netlify.app](https://trustsniffer.com/report/crypto-a0y.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-scx.netlify.app](https://trustsniffer.com/report/crypto-scx.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-crr.netlify.app](https://trustsniffer.com/report/crypto-crr.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100)
- [fomovotes-44.pages.dev](https://trustsniffer.com/report/fomovotes-44.pages.dev), another site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-1gt.netlify.app](https://trustsniffer.com/report/crypto-1gt.netlify.app), another .app site assessed as critical-risk (Critical Risk, 15/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/iota--o.web.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/iota--o.web.app · assessed 2026-10-27.*