Verdict
neurogems.ca shows high-risk / scam indicators.
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
| What this site appears to be | NeuroGems is a Toronto-focused nonprofit offering support services for people with Parkinson's Disease and Multiple Sclerosis, including referrals, in-home trainers, counseling, support groups, and fundraising/donation drives. The page emphasizes free discovery calls, testimonials, and how donations subsidize care. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 7 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 100% confidenceAbuseIPDB, 17 reports; shared hosting inflates reports | Risk |
| Domain age | 1.5 years oldRegistered history | Clear |
| Web archive | Archived since 2021377 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2021.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
NeuroGems.ca presents itself as a Toronto-focused nonprofit supporting people and families affected by Parkinson’s Disease and Multiple Sclerosis, with services including medical referrals, in-home trainers, emotional coaching, nutritional counseling, peer and caregiver support groups, and donation-funded subsidized care.
Scam/Impersonation Risk
The site’s homepage and supporting pages present a coherent community-support and charitable model, and the supplied page analysis found no login form, credential-harvesting mechanism, wallet activity, hidden sensitive form, or evident brand-impersonation signal. However, this benign presentation is contradicted by confirmed external blacklist activity and multiple malicious detections. Additional abuse reports concern a shared content-delivery IP attributed to WPEngine, Inc.; that attribution does not prove that the site itself generated the reports, but the signal remains materially relevant because it was not discounted. The available evidence does not establish an identity contradiction or site-level impersonation, but the confirmed blacklist status makes sensitive interaction inappropriate.
- The homepage describes support for Parkinson’s Disease and Multiple Sclerosis, including referrals, trainers, counseling, support groups, testimonials, and donation appeals.
- The observed page behavior completed 2 successful runs with 0 external XHR/fetch requests, 0 hidden forms, 0 password-external forms, and 0 wallet-drainer runs.
- External scanning recorded 7 malicious detections, with Fortinet and Sophos among the flagged vendors, and confirmed an external blacklist condition.
- Abuse reporting recorded 17 reports against 141.193.213.11, attributed to WPEngine, Inc. shared CDN infrastructure.
Regulatory Verification Notes
The About Us and related service pages describe a Toronto community nonprofit, but the available evidence does not independently verify the operating legal entity or establish regulated charitable status. No license, registration number, or authoritative regulatory reference is disclosed in the supplied site content; this is a transparency and verification gap rather than, by itself, proof of fraud. The site’s identity should therefore be treated as apparent but unverified. A valid transport certificate and identifiable infrastructure are positive technical conditions, but they do not resolve the external threat contradiction or prove the operator’s identity.
- The domain was registered through Go Daddy Domains Canada, Inc.; registration date: 2025-02-04T18:12:05Z; age: 1.54 years; expiry: 2027-02-04T18:12:05Z.
- Archive history contains 377 snapshots spanning 2021-12-18T23:29:32Z to 2026-02-25T10:22:43Z, covering 6 tracked years with a maximum gap of 1 year.
- Hosting was observed on AS209242, CLOUDFLARESPECTRUM - Cloudflare London, LLC, US.
- The site’s TLS certificate is issued by YE2 at DV validation level and is valid to 2026-10-18T12:51:02+00:00.
What to Verify Next
Before any sensitive interaction, an independent party should confirm that the organization named on the About Us page exists in the relevant Canadian or provincial charity registry and that any donation recipient and payment account correspond to that registered entity. Contact details should be confirmed through an independently sourced offline or institutional channel rather than relying solely on the website. Security teams should also re-check the domain and its active hosting endpoints through current protective controls before permitting access from managed environments.
- The About Us, Contact, and Donate pages are the site’s principal identity, contact, and transaction-related surfaces.
- The site presents donation-funded care and subsidized therapies as part of its operating model.
- The supplied analysis found no independently verified identity signal connecting the website to a confirmed real-world legal entity.
Summary Verdict
The overall posture is critical risk, driven by confirmed external threat contradictions that outweigh the site’s coherent nonprofit presentation and technically stable browsing behavior. The website’s legitimacy remains unverified, and sensitive interaction cannot be supported by the available evidence.
Infrastructure Integrity
Cloudflare CDN/WAF protection is present, with observed traffic terminating at edge infrastructure rather than an exposed origin. This reduces direct origin exposure and is a mitigating technical control only; it does not establish that the website or its operator is legitimate.
Closing Assessment
Access should be restricted to passive viewing while identity, donation handling, and current security status are independently established; login, credential submission, donations, and other financial or sensitive actions should not proceed in the interim.
Written analysis generated 2026-08-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by registration and ownership, analysis engine, external reputation.
01 Governance Risk
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE - The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
Signals weighed against the site
- AbuseIPDB: 17 reports on hosting IP 141.193.213.11 (WPEngine, Inc., Content Delivery Network), 100% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of neurogems.ca.
- The request stayed on neurogems.ca. It was not redirected to another domain. Clear
- Registration is published under Go Daddy Domains Canada, Inc. Clear
- DNS for this domain is served by domaincontrol.com, across 2 name servers. Noted
- The registration is paid up to 2027-02-04. Noted
- The earliest public archive of this site is from 2021-12-18. Clear
- It is hosted on CLOUDFLARESPECTRUM, from a server in US. Noted
Domain intelligence
| Registrar | Go Daddy Domains Canada, Inc |
|---|---|
| Hosting | CLOUDFLARESPECTRUM - Cloudflare London, LLC, US |
| Country | US |
| Server IP | 141.193.213.11 |
| Name servers | ns41.domaincontrol.com, ns42.domaincontrol.com |
| SSL issuer | YE2 |
| SSL expiry | 2026-10-18 |
| Domain age | 1.54 years (continuous registration) |
| Domain expiry | 2027-02-04 |
| Archive first seen | 2021-12-18 |
| Archive snapshots | 377 |
| Reputation | VirusTotal: 7 flagged | AbuseIPDB: 100% confidence, 17 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about neurogems.ca at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.