x.ipot.id returns a 404 error and appears to have no real content. Legitimate websites, even personal projects, usually give you some idea of who runs them and how to get in touch. This site does neither. The domain's WHOIS record is missing entirely, which is unusual for any active website. There's also no history in the Wayback Machine, meaning it either just appeared or has stayed hidden. Without an about page, contact details, or even a working homepage, there's very little to evaluate. If you came across x.ipot.id expecting a functional service, you should be cautious. Is x.ipot.id a scam? There isn't enough evidence to call it that, but the lack of transparency is a serious warning sign. For now, treat this site as untrustworthy until it provides basic information about who owns it and what it's supposed to do.
In plain English
We can't recommend trusting this site. The domain's ownership is completely hidden, and there's no way to reach anyone behind it. On top of that, the site isn't even serving normal content right now — it returned an error page.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The site has a valid SSL certificate and sets browser protections like forced HTTPS and content security policy. That's fine, but it's undermined by the site not actually loading properly.
The WHOIS record for this domain doesn't exist, meaning ownership is completely hidden. There's no about page, no team info, and no way to tell who's behind it.
No history in the Wayback Machine and no listings in any major blacklists. But that's because the site has no track record at all — it's either brand new or deliberately left no trace.
There is absolutely no contact information, no social media links, and no about page. The site gives visitors zero insight into who runs it.
No privacy policy or terms of service were found. For a site with no clear commercial purpose, that's not necessarily a red flag — but it's another missing piece.
DNS resolves to multiple IPs from an Indonesian provider, and a handful of security headers are set. No email setup or DNSSEC, but basic hosting is functional.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.