Is multiprotocoltoken.pro safe? TrustSniffer's low-trust assessment: 38/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at multiprotocoltoken.pro is a single-page property titled "GreenHub • Decentralized Wallet Resolution". It presents itself as a crypto-oriented wallet-resolution service and carries only a short body of homepage text. Its apparent purpose is to offer a decentralized wallet or address lookup under a brand that is unrelated to the domain name. No operator, product detail or company identity could be independently connected to it.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is cautionary. External threat-intelligence sources currently flag the domain, including a tier-one security vendor, and the combined detections amount to a confirmed blacklist listing. The detections do not specify a threat category, so the listing is a decisive reputational signal about the domain but not a diagnosis of the exact abuse type. The mismatch between the domain name (a "multiprotocol token" label) and the homepage brand (GreenHub) adds to the concern. The site's crypto-wallet theme is the context in which credential and seed-phrase harvesting typically occurs. In the automated sessions, the page made no external requests and showed no wallet-connection prompts, clipboard tampering, hidden forms or content cloaking. That is a mitigating observation about the captured page behavior only. It does not offset the listing, because a page can change after capture. No conflicting legal entities were found, because the site discloses none. Evidence:

• Homepage: the page title presents the "GreenHub" brand on a domain named for a multiprotocol token, and the two share no visible link.
• Domain reputation: two security engines rated the domain malicious and two more rated it suspicious, which together produced a confirmed blacklist listing.
• Homepage behavior: three successful automated sessions showed no external data transfers, wallet-drainer activity, clipboard writes or hidden forms.
• Domain provenance: registered 2026-02-17 (~0.68 years old), with a single archive snapshot dated 2026-02-19 covering 1 year tracked.

Regulatory Verification Notes

The captured homepage does not make a clear licensing, registration or corporate-identity disclosure. The on-page disclosure state is unclear, and ownership is opaque. This is a verification gap. It would not by itself indicate a scam, but here it coincides with the confirmed external listing and so removes any basis for assuming legitimacy. No third-party broker or regulator record matches the site, so there is no independent reputational or licensing reference to rely on. The domain's transport encryption is valid but offers only domain-level validation, which says nothing about who operates the site. Evidence:

• Homepage: no company name, licence, registration number or regulator reference appears in the captured content.
• Domain registration: the registrar is NICENIC International Group Co., Limited, and the registration expires 2027-02-17.
• Transport encryption: the TLS certificate is issued by YE1 (DV) and valid to 2026-12-03, with 38 days remaining.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the GreenHub brand should be traced to a genuine, independently published official domain by checking the brand's documented channels, not links found on this site. If the operator claims to hold a financial or virtual-asset licence, that claim should be confirmed directly with the relevant regulator's public register. Official support and contact channels should also be established through an independent route. Until the domain's listing status is cleared, the page should be treated as unverified. Evidence:

• Homepage: the "decentralized wallet resolution" claim is made without a named operator, which prevents any registry lookup.
• Domain history: the domain was registered in 2026, which gives no long-term track record for the brand.
• Reputation status: the external detections remain active, so any later delisting should be confirmed before the assessment is revisited.

Summary Verdict

The site is assessed as low trust with elevated risk. Confirmed adverse reputation, a very recent domain with no established record, and an unconfirmed operator identity together outweigh the technically clean page behavior. The available evidence supports no presumption of legitimacy.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server is not visible, so hosting cannot be independently verified, and content could be changed quickly behind the edge. The protective infrastructure and the valid certificate are mitigating factors only. They do not offset the external threat detections and do not establish legitimacy.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction. At most, read-only viewing from an isolated environment is appropriate, and nothing should be downloaded from it. Any prior interaction involving credentials or wallet access should be treated as potentially exposed and reviewed accordingly.