Is blockswalletschain.web.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, wallet-themed property on a shared web.app hosting subdomain. Its name implies a blockchain wallet or chain service. The captured homepage carries only a generic "Welcome to our website" title and a short block of text, with no distinctive product description. Its apparent purpose is therefore unclear. The page shows no named operator, and nothing on it ties it to a recognisable brand or service.

Scam/Impersonation Risk

The assessment is cautionary. A confirmed blacklist listing and multiple malicious detections from security vendors, including a tier-one vendor, currently apply to this site. These are the decisive findings. The sources do not specify the nature of the detections, so the listing cannot be tied to a particular attack type. A wallet-themed name on a free, shared hosting subdomain with a placeholder-style homepage matches a pattern commonly used to stage wallet-related lures. That is an inference from the name and pattern, not a confirmed finding. No conflicting legal identities and no brand impersonation were observed. The listing alone carries the elevated risk. Four abuse reports were also logged against a network address shared by the hosting provider. They are not specific to this site and carry little weight on their own. Automated browsing found no wallet-connection prompts, no wallet-draining behaviour, no clipboard manipulation, no hidden forms, and no credential submission to external hosts. This does not offset the listing, because malicious content can be swapped in after a clean observation. Evidence:

• Homepage: the generic title and placeholder-style text give no product, operator, or service description.
• Reputation: several security engines flagged the domain as malicious or suspicious, and a tier-one vendor was among them. The site is currently on a blacklist.
• Behavioural testing, three successful sessions: no wallet-drainer, clipboard-hijack, hidden-form, or cloaking behaviour. The pages produced about a thousand DOM mutations after interaction and six console errors.
• Network reputation: four abuse reports concern a shared provider address. This signal is soft and not specific to the site.

Regulatory Verification Notes

The captured homepage names no legal entity, registration number, licence, regulator, or jurisdiction. It also gives no terms, privacy, or risk disclosures. Independent identity verification of the site's operator was not achieved. The site's apparent wallet or chain focus would normally call for such disclosures. No third-party broker or regulatory record was matched, so there is no external reputational or licensing context to weigh. The site's lack of any identifying disclosures is a verification gap. It is not proof of wrongdoing by itself, but it compounds the reputation findings and removes any mitigating context. Evidence:

• Homepage: no named operator, licence, or jurisdiction appears in the captured content.
• Transport encryption: the TLS certificate is issued by WR4 at domain-validation level only and is valid to 2026-12-22. A certificate of this type confirms control of the domain, not the operator's identity.
• Hosting: served from AS54113 (Fastly, Inc., US).

What to Verify Next

Before any engagement, confirm through the official channels of the wallet or blockchain brand this site appears to evoke that the site is actually theirs. Any claimed operator should be checked against an independent corporate or financial-services registry. The domain should also be re-checked against threat-intelligence listings. A clean result there would be needed before any reassessment, and a site that appears to have been cleaned would still need its operator identified. No wallet should be connected, no seed phrase entered, and nothing downloaded in the meantime. Any official support or contact channel the site cites should be confirmed through a separate, independent route. Evidence:

• Homepage: no operator is named, so brand ownership must be confirmed externally.
• Reputation: the current blacklist listing is the main condition that would have to clear before any reassessment.
• Behavioural testing: the page's strong post-interaction changes mean a clean snapshot cannot be assumed to represent later content.

Summary Verdict

The site carries a critical, high-risk trust posture. Active blacklisting and multiple malicious detections outweigh its technically sound transport security and the absence of overtly malicious behaviour in testing. Its operator remains unidentified, and no legitimacy can be inferred from the evidence.

Infrastructure Integrity

The site sits behind the Fastly CDN, and all observed addresses are edge nodes. The origin server was not visible, which limits independent hosting verification and can mask rapid content swaps. The CDN's reputable standing is a mitigating factor for availability and delivery only. It does not offset the reputation findings and says nothing about the legitimacy of the operator.

Closing Assessment

The site should be treated as read-only at most. Account login, credential or seed-phrase entry, wallet connection, and any financial interaction should be avoided until the site's threat listings are cleared and its operator is independently identified.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.