Is rmwproperty-smartcontract.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "RMW Property Agents – Smart Contract". It is a single-page site on a free shared-hosting subdomain, and its title suggests a property-agency service tied to blockchain smart contracts. The captured page carries only a short body of text. Its apparent purpose is to invite visitors into a property-related, contract-based transaction flow. The site's real-world operator has not been independently connected to any recognised property business.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. Roughly ten security engines classify the site as malicious, with a further engine rating it suspicious. Two prominent security vendors are among those flagging it. Combined with a confirmed blacklist listing, this triggers a protective cut-off that overrides every positive signal. The domain is also very new and has almost no archive history. The name pairs a property-agent brand with a "smart contract" label on a disposable subdomain, a pattern typical of short-lived fraud and wallet-solicitation campaigns. The sandbox observed no external requests, wallet-drainer behaviour, clipboard manipulation, hidden forms, or cloaking across three runs, but these clean runs cannot offset independent malicious classifications. No conflicting legal-entity names were found, and no impersonation of a specific brand was confirmed. The risk rests on the blacklist and detection evidence, not on identity inconsistency. Any login, credential entry, wallet connection, or payment should be treated as unsafe. Evidence:

• Homepage: about ten engines flag the domain as malicious and one as suspicious, with two leading security vendors among them. The domain is also on an external blacklist.
• Domain provenance: first seen about 88 days ago (~0.24 years old), in 2026. The web archive holds 1 snapshot, dated 2026-08-02, so there is effectively no history.
• Homepage behaviour: three sandbox runs completed successfully with zero external requests, zero console errors, and no wallet-sensitive or clipboard activity.

Regulatory Verification Notes

The site is a single landing page with no identifiable legal entity, registration number, licence, or regulator reference. For a business that appears to offer property agency services connected to smart contracts, this is a significant disclosure gap. The page text was captured, but no AI-based identity verification of its content could be completed, so the site's claims about who operates it remain unconfirmed. Registration details for the domain are incomplete, which adds to ownership opacity. That is an administrative limitation and not an identity contradiction. No third-party broker record matched this site. The blacklist and detection signals above are reputational and technical signals, not a legal or licensing verdict. Evidence:

• Homepage: the title presents a property-agent brand with a smart-contract label, and no company name, licence, or registration identifier is visible.
• Transport encryption: the certificate is domain-validated only, issued by WE1, and valid to 2026-12-23. This confirms an encrypted connection but verifies nothing about the operator.
• Hosting: served from AS13335 (CLOUDFLARENET – Cloudflare, Inc., US). The host is a shared platform and does not vouch for the site's operator.

What to Verify Next

Before any engagement, the claimed agency should be checked against the official company and property-agent registers of the jurisdiction in which it purports to operate. Any smart-contract address or deposit instruction should be confirmed through a channel independent of this page. Examples are an offline call to a published number of a known, registered firm, or that firm's own verified website. Support channels should be confirmed the same way. Any security-vendor re-scan should be repeated after the owner has had time to respond, to see whether the detections persist. Evidence:

• Homepage: no registered agency identity is stated that could be checked, so verification must start from outside the site.
• Domain provenance: the roughly three-month-old domain has one archive capture, so no earlier legitimate use can be confirmed.
• Reputation: the current malicious classifications and blacklist listing remain the controlling reference point until independently cleared.

Summary Verdict

The overall posture is critical. Independent threat detections and a confirmed blacklist listing, together with a very young and unestablished domain, outweigh the clean technical behaviour and valid encryption. The site is classified as high-risk, and nothing in the evidence supports treating it as an established or legitimate operation.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and all four observed addresses are edge servers; the true origin server is not observable. This is a mitigating factor only. It shows the site is on mainstream, well-run infrastructure with a valid certificate, but it cannot offset the reputation findings and it says nothing about who operates the content. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any financial transaction. At most it may be viewed read-only, and nothing should be downloaded from it. Anyone who has already interacted with it should treat the exposure as compromised: move any funds or approvals to safe accounts and revoke wallet permissions.