Is multidapp-sync.netlify.app safe? TrustSniffer's low-trust assessment: 34/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page web application hosted as a subdomain on a public site-hosting platform. Its browser title reads "Home | Mainnet Sync app", and the page carries only a short block of text. It presents itself as a blockchain "sync" utility, a category that typically invites visitors to connect wallets or synchronise accounts. The captured page gives no clear statement of who operates it or what commercial model it follows.

Scam/Impersonation Risk

The risk here comes from external threat reputation, not from anything the page says. Several independent reputation engines report the site as malicious, others flag it as suspicious, and one tier-one security vendor lists it. This amounts to a confirmed blacklist-grade signal. It is the decisive factor behind the cautionary posture. No conflicting legal identities and no brand impersonation were observed. Four abuse reports exist against a network address used by the site's edge, but that address belongs to shared content-delivery infrastructure, so the reports cannot be attributed to this site alone. They add weight to the picture but do not carry it. The automated browsing sessions found no wallet-connection prompts, clipboard tampering, hidden forms, password submission to outside parties, or cloaking. This means the listings are not yet matched by observed malicious behaviour. The name's emphasis on "mainnet" and "sync" is the kind of positioning that drainer and credential-harvesting pages commonly use, and this is the reason the external listings are taken at face value. Evidence:

• Homepage: the only captured page, titled "Home | Mainnet Sync app", with a short text block and no visible operator identity.
• External reputation: two engines rate the site malicious, two rate it suspicious, and one tier-one vendor flags it.
• Shared-infrastructure abuse reports: four reports tied to a content-delivery address, which is not specific to this site.
• Behavioural testing: three successful sessions with no wallet, clipboard, hidden-form or cloaking activity.

Regulatory Verification Notes

The captured homepage names no operating company and gives no registration or licence number. It also has no terms, privacy or legal pages that could support identity. These are content gaps in the captured material. They are verification matters, not proof of wrongdoing. The site does not appear in any third-party broker reputation dataset or in a DeFi protocol directory. As a result, no independent source links it to a recognised project or regulated entity. The transport-encryption certificate is organisation-validated but is issued to the hosting platform, not to the site's operator. It therefore confirms secure transport and does not show who runs the site. Evidence:

• Homepage: no company name, jurisdiction, licence or registration reference.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• TLS: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.
• DeFi directory check: the site is not listed.

What to Verify Next

Any claim of affiliation with a named blockchain project should be tested through that project's official documentation, using an address obtained independently of this site. Whether the application belongs to a recognised team should be checked through that team's verified social or repository channels. The official support and contact routes should be confirmed offline or through those same independent sources. Before further assessment, the current threat-listing status should be rechecked on public multi-engine scanners, since listings can be cleared or added quickly. A corporate or licensing claim made anywhere should be checked against the relevant public registry. Evidence:

• Homepage: no outbound references to an identifiable project or team were captured.
• External listings: the current detections should be rechecked independently.
• Hosting platform: the subdomain model means the site's address says nothing about its operator.

Summary Verdict

The site is rated low trust and carries elevated risk. Active third-party threat detections drive that rating. They are not offset by the technical hygiene the site shows, and the operator's real-world identity is not independently established. The posture is cautionary, with sensitive interactions classed as unsafe.

Infrastructure Integrity

The site is served through Amazon's content-delivery edge, and all four observed addresses sit within that provider's network. The origin server was not observable. Edge-only visibility limits independent hosting verification and can mask rapid content changes. The edge network and valid transport encryption lower exposure to some technical attacks but do not reduce the reputational risk above.

Closing Assessment

Interaction should be limited to read-only viewing. Account login, credential entry, wallet connection and any financial or transactional use should be avoided until the external detections clear and an independent source confirms the operator.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.