Is resl0vedexxxiceiy.com a scam? TrustSniffer's high-risk assessment: 3/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site titled "DApp | Open source software application computing sytem" (the misspelling is in the title). It presents itself as an open-source decentralized software application. The homepage carries only a short block of generic text and no named product, team or commercial offer. Its apparent purpose is to act as a front end for a software or application workflow, but the page gives a visitor no concrete basis for judging what it does.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Several independent security engines currently flag the domain as malicious, including three tier-one security vendors, and an external blacklist listing is confirmed. Reputation intelligence of this kind is the most reliable indicator available for a site this new, and the protective hosting in front of the site cannot offset it. The domain name itself, a string of random letters with a digit standing in for a letter, is typical of disposable or throwaway infrastructure, not of an established brand. No conflicting legal entities or brand impersonation were observed in the page content. However, the site's own content is too thin to dispel the external warnings. In the behavioral sandbox the page made no external requests, tried no wallet connection, and used no hidden forms or clipboard manipulation. That shows no active exploit was triggered in these runs. It does not rule out later content swaps on a young domain or targeting of particular visitors. The page also generated a large number of console errors, which points to an unfinished or poorly maintained build. Evidence:

• Homepage and domain reputation: 11 security engines rated the domain malicious and 2 suspicious, with three tier-one vendors among them and an external blacklist hit confirmed.
• Domain provenance: registered in August 2026 (~0.19 years, ~70 days old).
• Web-archive depth: 1 archive snapshot, captured in September 2026 (1 year tracked), so there is no meaningful prior history.
• Homepage behavior: 63 console errors in 3 sandbox runs, with no external requests, wallet prompts or password forms observed.

Regulatory Verification Notes

The site discloses no company name, licensing status, registration number or jurisdiction on the single captured page, and no legal or terms pages were evident. These are verification gaps and are not, by themselves, evidence of wrongdoing. Here they matter because they leave nothing on the site to counterbalance the external threat findings. No third-party broker or regulatory-database match was found. The registrar is a low-cost ICANN-accredited provider, which says nothing about the operator's legitimacy in either direction. The real-world operator has not been independently connected to any identifiable organization. Evidence:

• Homepage: no legal entity, licence, registration number or regulator is named in the captured text of about 1,200 characters.
• Domain registration: registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, created 2026-08-17 and expiring 2027-08-17.
• Third-party broker and regulatory databases: no match found for this domain.

What to Verify Next

Before any engagement, the visitor should establish independently who operates the site and whether the "DApp" it describes exists as a real, publicly documented project. That means finding the project's official site, repository or announcements through an independent search and comparing them with this domain, not following any link from the page. Any claimed licence or registration should be checked directly with the relevant registry. Official contact and support channels should be confirmed through an independent route. The domain's reputation status should also be rechecked later, since the security engines' ratings can change. If the site is the visitor's own, the owner should review the hosting for compromise. Evidence:

• Homepage: the title refers to an "open source" application, yet no repository, documentation or project name is cited.
• Domain age: the domain is under three months old, so no long-term operating record exists to lean on.
• Reputation status: the current malicious ratings are the main item to recheck for change.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, together with a very young domain and no verifiable operator identity, outweigh the few neutral technical signals. The sandbox found no active exploit behavior, but the evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site is served from Cloudflare's network (AS13335, US), and all four observed addresses are CDN edge servers, so the true origin host could not be seen. The TLS certificate is a domain-validated one issued by WE1, valid to January 2027, which gives encrypted transport. A domain-validated certificate and a major CDN are available to anyone, including malicious operators, so they are mitigating factors only and do not establish legitimacy. Because the origin cannot be seen, hosting cannot be verified independently, and content could be swapped quickly. The young domain with sparse subdomain activity is an unconfirmed heuristic and adds no independent weight here.

Closing Assessment

Account login, credential entry, wallet connection and any financial transaction should be avoided on this site. At most, the site may be viewed read-only from an isolated browser, with no downloads or sign-ins. Organizations should consider blocking the domain pending a clean reputation re-assessment.