Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
zipcoin-proposal.xyz shows high-risk / scam indicators.
| What this site appears to be | The page promotes the $ZC token, presented as the currency of the fictional Snowmoon novel, with privacy features (zip/unzip deposits, burn-to-speak), an on-chain sales tax, contract addresses, and a rewards governance proposal. It includes a disclaimer stating the code is unaudited, the token is volatile, no promises are made, and the project is not affiliated with the novel's author. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
The website is a single-page promotional site for "zipcoin" ($ZC), a crypto token presented as the in-universe currency of a fictional novel called Snowmoon. It offers a wallet-connect button, a "zip/unzip" privacy pool, a "burn to speak" messaging feature, an on-chain "sales tax" on trades, and links to decentralized-exchange listings and a code repository. Its apparent business model is token trading and use of the token's features. A governance-style rewards vote is also advertised.
Scam/Impersonation Risk
No contradictory signals were observed. There are no confirmed threat-feed listings, no brand impersonation, no phishing indicators and no conflicting legal identities. The only third-party reputational note is a single unconfirmed "suspicious" flag from one of the many reputation engines consulted, which is a soft signal and not a finding of malicious activity. The concerns lie in how the site is built and what it sells. The domain is newly registered, and its name pairs the project with the word "proposal". The page prominently invites visitors to "Vote Now" on a rewards distribution date and promises "active participants" a 2.5x boost to their claiming power. This kind of engagement incentive, tied to a wallet connection, is a common way to draw users into signing transactions. The site frames the token through fiction ("Vitalik wrote the currency. We shipped it.") while a disclaimer says the project is not affiliated with the novel's author. That juxtaposition invites readers to assume a link to a well-known figure that the site itself disclaims. The "sales tax" is described as sent in real time to "Veridian", a fictional jurisdiction. This leaves the destination of that value stream opaque, and the live statistics panel shows only placeholder dashes for zipped volume, burns, tax and market cap, so the site's claims cannot be checked from the page. The deposit-then-withdraw privacy mechanic means users must first commit tokens before any service is delivered. Pooling tokens into an anonymity set also makes recovery difficult if the project proves unreliable. Behavioral testing was reassuring in one respect: there was no outbound data posting, no hidden forms, no clipboard tampering and no wallet-drainer behavior.
- Homepage: the rewards proposal block offers a "Vote Now" action and a 2.5x claiming-power boost for "active participants", with no explanation of how participation is measured.
- Homepage: the sales tax is said to be paid to the fictional jurisdiction "Veridian", and the statistics panel shows placeholder dashes in place of figures.
- Homepage: "Vitalik wrote the currency" appears beside a disclaimer that the project is not affiliated with the novel's author.
- Domain registration: created 2026-09-29, roughly 22 days (~0.06 years) before analysis, via the registrar NICENIC International Group Co., Limited. Registration expires 2027-09-29.
Regulatory Verification Notes
The page names no operating company, team, jurisdiction of incorporation, license or registration number. A real operator would normally publish these for a token with a deposit pool and a governance-style reward program. This is a disclosure gap, not evidence of wrongdoing in itself. The site does disclose that the code is unaudited, that the token is volatile, that no promises are made, and that it is not affiliated with the novel's author. These disclosures are candid, but they also confirm that no independent security review backs the privacy pool or the contract. Broker-reputation databases hold no entry for the site, so there is no third-party regulatory or reputational record to lean on either way. The page links to an open-source code repository and a social account, which allow outside inspection but do not establish who stands behind the project.
- Homepage: contains no company name, registration number, license claim, or named team members.
- Homepage disclaimer: states the code is unaudited and the token volatile, and that no promises are made.
- Homepage: publishes a single token contract address (0x4E67DB19044549fF420860834c91b45BaD298722) and links to a repository and a social profile for the project.
- Technical telemetry: served from AS13335 (Cloudflare, Inc., US); transport encryption uses a domain-validated (DV) certificate issued by YE2, valid to 2026-12-28.
What to Verify Next
The contract at the published address should be inspected independently on a block explorer. That check should cover who deployed it, whether the source code is verified, whether the owner can change the tax rate or pause trading, and how liquidity is held and locked. The code repository and social account should be checked for a history that predates the domain, and the project should be confirmed through the novel's own official channels. Any claim of connection to a named public figure should be checked at the source. The "Veridian" tax destination should be traced on-chain to a wallet address, so the real recipient of the tax can be identified. Official support or contact channels should also be confirmed through a route independent of this site.
- Homepage: the single contract address and the links to exchange listings give the points to cross-check on-chain.
- Homepage: the repository and social links give a project history to compare against the domain's creation date of 2026-09-29.
- Homepage: the stated sales-tax destination and the rewards proposal can be tested against contract behavior.
Summary Verdict
The site carries an elevated risk posture. It is a very young, anonymous-operator crypto token page, and no third-party or regulatory standing supports it. Its mechanics place user funds at risk before any service is delivered. Clean technical hygiene and quiet browser behavior limit the likelihood of direct malicious activity. They do not offset the project's unproven governance, so the available evidence does not support treating it as trustworthy.
Infrastructure Integrity
The site sits entirely behind Cloudflare's CDN and web-application firewall. All observed addresses are edge servers, and the origin host cannot be seen. This provides baseline protection against denial-of-service and basic web attacks, and the certificate is valid with a long remaining lifetime. These are mitigating factors only. They do not speak to the legitimacy of the operator. The origin's invisibility also means the underlying hosting cannot be independently checked, and content could be swapped quickly behind the edge. The very young domain with sparse DNS records is consistent with a newly launched project.
Closing Assessment
Reading the page for information is reasonable. Connecting a wallet, depositing tokens into the privacy pool, or acting on the rewards vote should be held off until the on-chain and operator checks above have been completed. Any wallet used for experimentation should be a separate one holding only amounts the user could afford to lose.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by hosting and network, page content.
01 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
02 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META - The page carries none of the structured previews for search and social sharing that established sites usually provide.Page content
rule:PAGE_SEO_NO_STRUCTURED
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of zipcoin-proposal.xyz.
- The request stayed on zipcoin-proposal.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-29. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:5082 |
| Name servers | LADY.NS.CLOUDFLARE.COM, ROB.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-28 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-29 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about zipcoin-proposal.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.