Verdict
web3auth.io appears legitimate.
Our checks found nothing pointing to fraud. Ordinary care still applies when you pay or sign in.
| What this site appears to be | Web3Auth presents enterprise-grade, non-custodial wallet and authentication infrastructure using MPC and account abstraction. It targets Web2 and Web3 developers with SDKs, wallet services, social login, MFA, blockchain support, compliance claims, documentation, demos, pricing, and customer references. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 4.8 years oldRegistered history | Clear |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by Amazon RSA 2048 M01 | Noted |
The page as captured
No screenshot is retained for this report.
Key findings
- Automated classification: Not Scam.
- Domain age: 3 to 10 years (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
Web3Auth is a corporate Web3 infrastructure platform offering non-custodial wallet, authentication, and developer services for organizations integrating blockchain capabilities into Web2 and Web3 applications.
Scam/Impersonation Risk
No phishing, impersonation, blacklist, or conflicting-identity indicators were observed. The homepage presents a coherent enterprise SaaS model centered on MPC-based wallet infrastructure, account abstraction, authentication SDKs, MFA, wallet services, blockchain integrations, and developer tooling rather than deceptive financial-return schemes. Its behavior showed no login form, hidden form, wallet-drainer activity, clipboard hijacking, or suspicious script activity, supporting the conclusion that normal interaction is appropriate.
- Homepage: Identified as a corporate product landing page for Web3 wallet and authentication infrastructure, with no reported red flags.
- Homepage behavior: One newsletter form was observed; no sensitive form, external password destination, wallet connection, or hidden form was detected.
- External reputation: Evaluated checks recorded zero malicious and zero suspicious detections, with no blacklist or phishing indication.
- Domain registration: Created 2021-10-26 and approximately 4.77 years old.
Regulatory Verification Notes
The homepage states that Web3Auth was acquired by Consensys Software Inc., providing a clear corporate-affiliation disclosure within the site content. The available material does not present a financial-services license or registration number; for this apparent infrastructure-SaaS model, that is a transparency and scope consideration rather than evidence of deception. Domain registration is privacy-protected through an administrative service, without creating an identity contradiction.
- Homepage: Displays the acquisition notice identifying Consensys Software Inc.
- Domain registration record: Registrar is NAMECHEAP INC; creation date is 2021-10-26 and expiration date is 2028-10-26.
- Hosting telemetry: Served from AS16509, Amazon.com, Inc., US.
- Transport security: TLS certificate issued by Amazon RSA 2048 M01, DV validation, valid through 2026-10-14.
What to Verify Next
For an enterprise deployment, the contracting entity, applicable privacy and security terms, service scope, and current commercial conditions should be confirmed through the site’s legal, documentation, pricing, and sales materials. If a proposed use involves regulated custody or financial activity, the relevant jurisdictional licensing requirements should be checked independently.
- Documentation pages: Describe the technical service scope and implementation model.
- Pricing and sales materials: Define commercial access and enterprise arrangements.
- Legal and privacy pages: Provide the controlling contractual and data-handling terms.
Summary Verdict
The site presents a legitimate, established, and trustworthy enterprise technology business with no observed contradictions or material abuse indicators. The convergence of coherent business content, stable technical operation, clean external reputation, and established online presence supports a high-trust posture.
Infrastructure Integrity
The site uses Amazon-hosted delivery infrastructure with valid mainstream TLS protection. This is a mitigating infrastructure signal and supports service resilience, while remaining separate from proof of corporate legitimacy.
Closing Assessment
Normal account login and standard use are appropriate for the stated SaaS purpose; enterprise users should complete their usual contractual, privacy, and jurisdictional checks before deployment.
Written analysis generated 2026-08-02 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
No rule findings contributed to this verdict.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of web3auth.io.
- The request stayed on web3auth.io. It was not redirected to another domain. Clear
- Registration is published under NAMECHEAP INC. Clear
- DNS for this domain is served by awsdns-37.com, across 4 name servers. Noted
- The registration is paid up to 2028-10-26. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | NAMECHEAP INC |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 18.165.140.60 |
| Name servers | ns-302.awsdns-37.com, ns-1854.awsdns-39.co.uk, ns-1304.awsdns-35.org, ns-801.awsdns-36.net |
| SSL issuer | Amazon RSA 2048 M01 |
| SSL expiry | 2026-10-14 |
| Domain age | 4.8 years |
| Domain expiry | 2028-10-26 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about web3auth.io at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.