Is cointokens.cc a scam? TrustSniffer's high-risk assessment: 0/100

Overview

The website at cointokens.cc is a single-page web property whose homepage carries the browser title "RAD" and only a few characters of visible text. It offers no readable description of its products, operator or purpose. The page nonetheless loads a wallet-provider component, which points to a crypto-asset or token-related front end. Its apparent function is to present a wallet-connected interface under a token-themed domain name, with no stated business model.

Scam/Impersonation Risk

Contradictory signals are present, and the posture here is clearly cautionary. Multiple independent security engines flag the domain as malicious or suspicious, and it also appears on an external blacklist. These are confirmed blacklist hits, not soft reputational noise. They sit alongside a very recently registered domain whose homepage offers no identifiable content to explain its purpose. A token-themed name, an empty page and a wallet-provider component are a combination commonly associated with wallet-solicitation and phishing infrastructure. No brand impersonation or conflicting legal identities were observed, and the sandbox did not record wallet-drainer activity, clipboard manipulation, hidden forms or cloaking. The decisive concern is therefore the external detections, which do not depend on proof of a specific attack mechanism. The sandbox did record outbound activity: a moderate share of page requests went to third-party hosts, including several external data submissions. All of it went to recognized destinations, so it is context rather than a separate finding. Evidence:

• Homepage: browser title "RAD" with almost no visible text, and no products, terms or contact details to substantiate the domain's token-related name.
• Homepage behavior: a wallet provider was detected on load, with 13 external fetch requests and 4 external POST submissions across three sandbox runs, all to recognized destinations.
• Domain registration: created 2026-08-19 (~0.18 years old, ~2 months), registered through Gname.com Pte. Ltd., with expiry on 2027-08-19.
• Web archive: 1 snapshot in total, first and last seen 2026-08-31 (1 year tracked), so there is no prior history to support continuity.

Regulatory Verification Notes

The site publishes no legal, terms, privacy or about content, so no licence, registration number, corporate entity or jurisdiction is stated on any page. For a domain presenting a crypto-themed interface, this is a disclosure gap on the site's own content, and it leaves no basis for treating the operation as regulated. No third-party broker or regulatory-database match was found, and that absence is not a clearance. The real-world operator has not been independently connected to any identifiable organization or person, so no legitimacy should be inferred from the domain name. Evidence:

• Homepage: no company name, licence reference, regulator, address or policy links are presented.
• Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-15. This confirms an encrypted connection but says nothing about who operates the site.

What to Verify Next

Before any interaction, the domain should be checked against the official channels of any token project or platform it claims to represent, reached independently of this site. Any wallet-connection prompt should be treated as unverified until the operator is identified. Official support and contact channels should be confirmed through a separate route. Any licence or registration claim that later appears should be checked directly with the relevant registry. Parties who have already interacted with the domain should review their wallet approvals and revoke any they do not recognize. Evidence:

• Homepage: the wallet-provider component is present without any explanation of what a connection would authorize.
• Domain registration: the domain is only about two months old, so no long-standing reputation exists to rely on.
• External reputation: multiple security engines currently flag the domain, so any later clearance should be rechecked.

Summary Verdict

The available evidence supports an elevated-risk posture. Confirmed external blacklist and malicious-detection hits, a very new domain with no history and an uninformative page converge, and the transport encryption and mainstream hosting do not offset them. Legitimacy cannot be established, and the operator's identity is unverified.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and all four resolved addresses are edge servers, so the origin host is not observable. The transport encryption is valid and the hosting provider is mainstream, which counts only as a mitigating factor. Edge-only visibility also prevents independent hosting verification and can mask rapid content changes. Infrastructure protection does not offset the external threat detections.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection or financial transaction. At most, passive viewing from an isolated environment is acceptable until the external detections are cleared and an accountable operator is identified.