Is btc-solv.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a recently registered ".app" domain whose name points to a Bitcoin or crypto-themed service. When a visitor reaches it, the site's edge protection returns a security interstitial headed "Suspected Phishing" in place of any product, brand, or service content. Its purpose and business model cannot be determined from what it serves, and the pattern fits a short-lived crypto-themed front, not an established operation.

Scam/Impersonation Risk

Multiple independent threat-intelligence sources flag the domain. Several engines rate it malicious and additional engines rate it suspicious, including at least one major security vendor. This amounts to a confirmed blacklist condition, and it is the decisive factor in the assessment. A separate phishing indicator is also attached to the domain. The interstitial headed "Suspected Phishing" that the site returns to visitors is consistent with those flags. No conflicting legal identities and no explicit brand impersonation were observed, but this does not offset the reputational findings. The domain name's crypto framing, combined with its very recent registration and the phishing flags, matches a common pattern for credential and asset-harvesting campaigns. Behavioral testing found no wallet-drainer activity, no clipboard manipulation, and no hidden or externally posting password forms. It did show unusually heavy third-party traffic, repeated script errors, and a sharp spike in page-structure changes after interaction. These are consistent with content that is loaded or swapped dynamically and are not clean-bill indicators. Evidence:

• Homepage: the response was a security interstitial titled "Suspected Phishing" in place of site content.
• Reputation checks: multiple engines returned malicious and suspicious detections, with one major security vendor among them.
• Homepage behavior: 134 external background requests, 9 external POST requests, 21 console errors, and a peak of 1,523 page-structure mutations after interaction. No wallet-provider, drainer, or clipboard activity was detected.
• Domain registered 2026, about 0.37 years old; the web archive holds 1 snapshot (2026, 1 year tracked), so there is no meaningful operating history.

Regulatory Verification Notes

No licensing, registration, or regulated-entity status is associated with this domain, and no corporate disclosure is attributable to it. Registrant details are withheld or incomplete, which is ownership opacity. It is not an identity contradiction, since no distinct legal-entity names appeared. The absence of licensing information is not by itself evidence of fraud, but here it sits alongside confirmed threat detections and a very young domain. No credible institutional footing exists to weigh against those signals. Evidence:

• Registration record: registered through NICENIC International Group Co., Limited, created 2026-06-17 and expiring 2027-06-17, with owner details withheld or incomplete.
• Transport layer: the TLS certificate is domain-validated only (DV), issued by WE1, valid to 2027-01-12. This confirms encryption but not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any dealings with this domain should be preceded by independent confirmation that a real, licensed entity operates it. Look for any financial or crypto-service provider claiming to run this site in the relevant national regulator's public register. Establish the official domain and contact channels of any brand it appears to represent through the brand's own known channels, not through links or messages that lead here. Treat any message, advertisement, or referral directing someone to this domain as unverified until the sender is confirmed offline. Evidence:

• Homepage: no brand, operator, or licensing information was presented to visitors, so the claimed identity cannot be checked against a registry.
• Registration record: owner details are withheld, so the operator cannot be established from public domain data.
• Archive record: a single 2026 snapshot gives no earlier history that could corroborate a prior legitimate use.

Summary Verdict

The domain carries a critical trust posture. Confirmed threat-intelligence detections and a phishing association dominate the assessment and decisively outweigh the neutral technical hygiene. Its newness and the lack of any verifiable operator history leave no credible counterweight, and it should be classed as a high-risk site.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, with bot-challenge protection active. All observed addresses are CDN edge nodes and no origin server was observable, so the real hosting location cannot be independently checked. This is a mitigating factor only. It does not offset the reputation findings, and edge-only visibility also makes quick content changes behind the same address harder to detect.

Closing Assessment

Do not log in, connect a wallet, submit credentials, or make any payment or deposit on this domain. Any contact with it should be limited to passive viewing, and nothing should be downloaded from it. Anyone who has already interacted with it should treat the account and wallet details as exposed. They should change passwords, revoke any wallet approvals, and report the site to the relevant security or anti-fraud authority.