Security Review

Is wplace.com legit or a scam?

Our verdict:Suspicious· 53/100

Cybersquatting typosquat of wplace.live featuring conspiracy rants and loud shock audio, confirmed as intentional harassment by community reports.

wplace.comScanned 1h ago
0
Trust score
SUSPICIOUS
Heuristics 76·MT 40
Category tags
cybersquattingharassmenttyposquat#Clone Site85% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Suspicious
High likelihood · 85% confidence
SUSPICIOUS

Possible brand impersonation

Cybersquatting typosquat of wplace.live featuring conspiracy rants and loud shock audio, confirmed as intentional harassment by community reports. The page looks styled like a known brand but may not be authentic. Check the URL carefully and navigate to the brand's real site before signing in or paying.

Website Preview

Screenshot of wplace.com
LIVE RENDER
wplace.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
wplace.com is registered as a deliberate typosquat of the popular collaborative pixel-art site wplace.live. Reddit users and the wplace.live community have confirmed the domain is owned by a cybersquatter who intentionally registered a similar name to confuse visitors and harass the legitimate site. The page content cycles through unsubstantiated claims about South32 CEO statements and an $800 billion lawsuit against BHP, mixed with profanity and political rants. Multiple Reddit reports document the site's evolution from a construction page with looping siren sounds to hour-long videos of repetitive shouting ("SELL IT SELL IT SELL IT"), suggesting deliberate shock-value harassment rather than legitimate business operation. No malware was detected in our scan, but the pattern of typosquatting combined with community warnings and the operator's known history of similar rant pages on other domains establishes this as intentional cybersquatting and potential extortion.
Full dossier
Analysis complete

Page Content

The page displays repetitive text claiming South32's CEO is suing BHP for $800 billion over cancer-causing mining practices. The title and meta description contain profanity and unsubstantiated legal claims. Body text repeats the same phrases dozens of times with no coherent business purpose or legitimate information. Reddit reports confirm the site has been updated multiple times with increasingly disruptive audio content, including hour-long videos of loud drums and screaming.

Infrastructure

Valid SSL certificate (Let's Encrypt, 58 days to expiry), clean hosting IP with zero abuse reports, and no malware detected by our antivirus network. The domain loads a single external resource from south32.com (the real company's site). No login forms, countdowns, or push-notification spam detected.

Domain History

wplace.com is a confirmed typosquat of wplace.live, the legitimate collaborative pixel-art platform. Our scam-network fingerprint identified the typosquat relationship. WHOIS data is unavailable, but Reddit evidence and community warnings establish the domain is intentionally registered to confuse users and harass the real site's owner.

Web Reputation

Multiple Reddit users report accidentally visiting wplace.com instead of wplace.live and encountering the rant page or loud audio content. The wplace.live community has warned users about wplace.com on their Discord. No positive reviews or legitimate business registration found. Similar rant pages using the same operator's style ("Mr. Lucky Luigi" persona, massive lawsuit claims) appear on other domains, indicating a pattern of cybersquatting and harassment.

Risk Factors
7
  • Confirmed typosquat of wplace.live, a legitimate collaborative art site with Wikipedia entry and active user base.
  • Community consensus on Reddit and Discord confirms intentional cybersquatting and harassment by the domain owner.
  • Page content consists entirely of unsubstantiated conspiracy rants about South32/BHP lawsuits with no evidence of such claims.
  • Site has been updated multiple times with increasingly disruptive audio content (siren loops, hour-long screaming videos) designed to shock or harass visitors.
  • Operator has a known pattern of registering similar typosquat domains with rant pages using the "Mr. Lucky Luigi" persona.
  • No legitimate business registration, contact address, or business purpose identified.
  • Visitors frequently arrive by accident, expecting the real wplace.live site.
Positive Signals
4
  • Clean antivirus scan: 0 of 92 engines flagged as malicious.
  • Valid SSL certificate and clean hosting IP with zero abuse reports.
  • No malware, phishing forms, or credential-harvesting detected.
  • No direct financial or data-theft harm reported by users.
AI Recommendation
Do not enter any personal information or payment details on this site. If you arrived here by accident while looking for wplace.live, navigate directly to wplace.live instead. Report the domain to the legitimate wplace.live operators if you have not already done so.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for wplace.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
Typosquat of wplace.live
Deliberate misspelling of a real brand's domain.
Web mentions
3 scam reports · 2 complaints
Key findings
7 headline facts from open-web research
  • wplace.com displays repetitive text claiming "South32 CEO says FUCK AUSTRALIA" and that South32 is suing BHP for $800 billion over alleged cancer-causing mining; no evidence of such a lawsuit found in searches.
  • Multiple Reddit users report accidentally visiting wplace.com instead of the popular collaborative pixel art site wplace.live, encountering loud looping videos/sounds described as creepy, jumpscare-like, or a "rabbit hole about some derange
  • wplace.live owners have warned users about wplace.com on their Discord; community consensus is that it is a cybersquatting/troll site intended to harass or extract payment from the legitimate site owner.
  • The site has been updated over time: initially a construction page with siren sounds, later featuring hour-long videos with repetitive shouting like "SELL IT SELL IT SELL IT" or South32 rants.
  • No malware or direct harm reported from viewing (beyond potential loud audio shock); users advised it is safe if exited quickly, though some experienced browser sound issues.
  • Similar rant pages using "Mr. Lucky Luigi" and massive lawsuit claims against law firms or companies appear on other domains, suggesting a pattern by the same individual.
  • wplace.com has very low traffic (thousands of visits) and is frequently confused with the viral wplace.live (launched 2025, Wikipedia entry, active collaborative canvas).
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Reddit r/WplaceLiveopen

    "It's already known to the wplace owners, they warned about it on their Discord. It's not their website of course."

  • Reddit r/WplaceLiveopen

    "the owner of this domain (who his identity is already knowed) is doing "cybersquatting" and this is a crime, he buys domains that are very similar to those of certain companies and sites, then put these absurd things to make the real compan"

  • Reddit r/websiteopen

    "wplace.com is a website that appeared to be under construction with a looping sound of "W PLACE COMING SOON _SIREN, SIREN_" (30 min loop originally); later updated to an hour-long video of loud drums and a guy screaming "SELL IT SELL IT SEL"

Impersonation / typosquat
Typosquat of wplace.live

Not a visual clone of wplace.live; instead uses similar name with unrelated conspiracy-style video content about South32/BHP.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Reddit users report that wplace.com is a typosquat of the legitimate collaborative pixel-art site wplace.live. Multiple community members confirm the domain owner is engaged in cybersquatting and intentional harassment. The wplace.live community has warned users on Discord about wplace.com. Reports document the site's evolution from a construction page with looping siren sounds to hour-long videos with repetitive shouting. The operator appears to have a pattern of registering similar typosquat domains with rant pages using the "Mr. Lucky Luigi" persona. No malware or direct financial harm reported, but users describe the experience as creepy or shock-value harassment.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Domain is a typosquat of wplace.live.
Linked signals (1)
Typosquat of wplace.live

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious56Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
Has contact info, but not on the site's domain
Emails on site's domainNone
Phone numbers000.00800
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No email uses the site's own domain — legitimate shops usually do.
  • No postal address visible on the page.
  • Phone number listed (000.00800).

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · R12
ExpiresAug 13, 2026 (58d)
Self-signedNo
Hosting & Technology
HostingDreamHost
Server locationUS
Web serverApache

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://wplace.com/
  • 2200https://wplace.com/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPDreamHost
Usage typeData Center/Web Hosting/Transit

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation
Brand Impersonation
Moderate likelihood
35/100
  • Domain is a typosquat of wplace.live.
  • AI analyst tagged this as a brand / clone-site impersonation.

Possible brand impersonation

This page is styled as a known brand but is not the brand's real site.

  • Treat wplace.com as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • Go to the brand's real site directly

    Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.

  • Never download or sign in here

    Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.

  • Report the impersonation to the brand

    Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked wplace.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • wplace.com currently scores 53/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. wplace.com presents a valid TLSv1.3 certificate issued by Let's Encrypt · R12, expiring in 58 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 92 antivirus engines in our malware network report wplace.com as clean.
  • No. wplace.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • wplace.com resolves to an IP operated by DreamHost in US (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 16, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around wplace.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·wplace.com
SUSPICIOUS

wplace.com is a typosquat domain impersonating the legitimate collaborative art site wplace.live. The page hosts repetitive conspiracy rants about South32/BHP mining lawsuits and has been updated with loud, disruptive audio content designed to harass or extort the real site's owner.

Do not enter any personal information or payment details on this site. If you arrived here by accident while looking for wplace.live, navigate directly to wplace.live instead. Report the domain to the legitimate wplace.live operators if you have not already done so.

AV engines
92
MT passes
2
Net signals
1
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.