Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
wrapfixsummary.netlify.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 15 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 1% confidenceAbuseIPDB, 4 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page site on a subdomain of a public developer hosting platform. Its browser title is "Dapps Leading Protocol", which suggests decentralized-application or crypto-protocol branding. The homepage shows only a very short passage of text and no visible products, pricing, team or documentation, so its business purpose cannot be determined from the content. A minimal landing page of this kind is a common shell for credential-harvesting or malware-delivery campaigns that borrow crypto vocabulary.
Scam/Impersonation Risk
The assessment is clearly cautionary. Several independent security engines currently flag the domain as malicious. They include two prominent, well-regarded security vendors, and the volume of detections is well beyond what isolated false positives produce. This is a confirmed blacklisting that sharply limits the site's trust standing, and no hosting or certificate strength can offset it. No brand impersonation, phishing page or conflicting legal identities were observed in the captured content, so the risk comes from reputation rather than from content contradictions. Automated browsing of the homepage showed no wallet-connection prompts, clipboard manipulation, hidden forms, external data posts or page cloaking. That behaviour is benign, but the capture is thin and a landing page this sparse could be changed to a harmful payload at any time. The site's hosting address also has a small number of abuse reports. They attach to a shared infrastructure address used by many customers of the hosting provider, so they are a minor signal and are not attributed to this site's operator.
- Homepage: the title reads "Dapps Leading Protocol", and the captured text is only a short fragment, so no product or service claims can be assessed.
- Reputation checks: 15 malicious and 1 suspicious verdicts from security engines, including two tier-1 vendors, trigger an automatic score ceiling.
- Browser sandbox: three successful runs recorded no external network requests, no wallet-connect activity and no cloaking.
- Hosting address: 4 abuse reports apply to a shared provider address, with a very low confidence score.
Regulatory Verification Notes
The captured homepage contains no legal entity name, terms of service, privacy policy, licensing or registration statement, or contact details. Nothing on the site offers an accountable operator or a regulated activity that could be checked. The site is hosted under a platform-provided subdomain rather than a standalone branded domain. That is common for prototypes and disposable pages, but it gives the operator no verifiable corporate presence. The site's TLS certificate is an organization-validated certificate issued to the hosting platform, not to the site's operator, so it confirms transport encryption and says nothing about who runs the site. No third-party broker or regulatory-database match was found, and no regulatory standing can be inferred.
- Homepage: no company name, license number, jurisdiction, terms or privacy page is present in the captured content.
- Transport security: the TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organization Netlify, Inc, valid to 2027-03-19.
- Hosting: the site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
- Broker reputation: no match in the third-party broker dataset.
What to Verify Next
The site should not be treated as a counterparty until an accountable operator is identified through independent channels. Anyone who was directed here by a message, advertisement or social profile should trace that referral back to its source and treat it as suspect. Any claimed affiliation with a protocol or project should be checked against that project's official channels, reached by a route the visitor chooses rather than a link supplied by this site. Official support or contact channels should be confirmed the same way. Re-checking the domain's reputation before any later decision to interact is also sensible, because the current detections would need to be cleared.
- Homepage: the site gives no verifiable team, entity or product reference to validate.
- Reputation checks: active detections from multiple engines remain the controlling factor.
- Hosting platform: the subdomain structure means the platform's abuse-reporting process is available for escalating the site.
Summary Verdict
The overall posture is high-risk. Active, multi-engine malicious detections define the assessment, and a valid certificate and clean behavioural traces do not outweigh them. The minimal content and unidentified operator leave nothing that would justify a more favourable reading.
Infrastructure Integrity
The site runs on a major cloud provider's edge network behind a managed hosting platform, and the certificate is valid and issued by a known authority. This protective infrastructure is a mitigating factor only. The origin server is not observable, which limits independent hosting verification and means content can be swapped quickly without any visible change in hosting. Because it is shared infrastructure, the platform's reputation does not carry over to this particular site.
Closing Assessment
Interaction beyond passive viewing is not appropriate. Visitors should not log in, connect a wallet, enter credentials or make any payment on this site, and should not download anything from it. Anyone who has already interacted should change any exposed credentials and review wallet approvals.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by governance, external reputation, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of wrapfixsummary.netlify.app.
- The request stayed on wrapfixsummary.netlify.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::258 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 15 flagged | AbuseIPDB: 1% confidence, 4 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about wrapfixsummary.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.