Is coinwalletsolution.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website on a free Vercel-hosted subdomain, titled "coinsolutions - Bitcoin And Crypto Currency". It presents cryptocurrency-themed content, and its apparent purpose is to offer crypto-related services or information to visitors. The captured page text does not establish who operates it or what product or service it provides.

Scam/Impersonation Risk

This is the decisive area of concern. The domain is blacklisted: multiple independent security engines currently flag it as malicious or suspicious, including two tier-one vendors. That is a confirmed contradiction and puts the site in an elevated-risk category for any sensitive interaction. The crypto branding raises the stakes, because sites of this type are commonly used for credential capture and payment diversion. No conflicting legal identities, brand impersonation, or confirmed phishing classification were recorded, and no contact-email anomaly was observed. The risk therefore rests on the blacklist and detection evidence, not on identity inconsistencies. The behavioural sandbox gives a limited mitigating picture. Across three runs it observed no wallet-connection prompts, wallet-drainer activity, clipboard manipulation, hidden forms, or credential posts to third-party hosts. It did observe a heavy burst of page rebuilding after interaction and a high volume of script errors, which suggests an unstable or hastily assembled front end. This absence of overt malicious behaviour does not offset current external detections, because malicious behaviour can be activated or swapped in later. A large number of abuse reports also exist, but they attach to a shared hosting-provider address used by many unrelated tenants. They are discounted as evidence against this site and are not counted toward the conclusion above. Evidence:

• Homepage: the page is titled as a Bitcoin and cryptocurrency offering, and about 3,200 characters of text were captured. The captured text identifies no operator.
• Reputation checks: current detections from several security engines, including two tier-one vendors, produced the blacklist finding.
• Behavioural testing (3 of 3 runs completed): 43 console errors and a peak of 2,064 DOM mutations after interaction. No wallet-drainer, clipboard-write, hidden-form, or external password-form behaviour was found.
• Abuse reporting: 87 reports were logged against a shared Vercel provider address and discounted as shared-infrastructure noise.

Regulatory Verification Notes

The captured homepage does not establish an operating entity, licence, registration number, or jurisdiction, so the on-page disclosure position is unclear. The site cannot be tied to a real-world brand or person, and its identity is unverified. It also runs on a shared platform subdomain, so the domain gives no independent corporate identity. No match was found in the broker-reputation dataset. This is neutral context, not a licensing or regulatory conclusion. A crypto-themed site that offers no verifiable operator or authorisation would ordinarily fall within financial-services oversight, so the missing disclosures are material. They are a verification gap that supports caution but does not prove wrongdoing on its own. Evidence:

• Homepage: no company name, licence, registration number, or regulator reference appears in the captured text.
• Hosting: the site is served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), with the platform subdomain operated by Vercel.
• Transport encryption: the TLS certificate is issued by WR1 at DV (domain-validated) level and is valid to 2026-11-27. DV confirms control of the domain only, not the identity of the operator.
• Broker reputation dataset: no match found.

What to Verify Next

The site should not be treated as a legitimate counterparty until its operator is independently established. Any claim of a licence or registration should be checked directly in the relevant national financial regulator's public register. The check should use a registry URL typed in by hand, not any link found on the site. Any named business should be confirmed through an official company registry, including a registered address and directors. Any official support or contact channels should be confirmed through an independent route, such as the claimed company's verified public presence, and not through details printed on this page. The current detection status should also be re-checked with the primary security vendors before any decision is revisited, since listings change over time. Evidence:

• Homepage: the operator, licence, and registry details needed for registry lookups are not given in the captured text.
• Domain: the site sits on a shared platform subdomain, so domain registration records cannot identify the operator.
• Reputation checks: the blacklist finding rests on live external detections that can change, so it needs a current re-check.

Summary Verdict

The overall posture is high-risk. The site has confirmed adverse reputation findings and no independently verified identity. The weaknesses are decisive, and the technical hygiene of a valid certificate and a recognised hosting platform does not outweigh them.

Infrastructure Integrity

The site is fronted by the Vercel content-delivery and edge platform, and all observed addresses are edge nodes on that provider's shared network. No origin server was observable. This arrangement is a mitigating factor, since it indicates a mainstream, professionally operated platform. Edge-only visibility, however, prevents independent verification of where the content is actually hosted. It also means page content can be changed quickly without any visible change in network identity. Protective infrastructure is not evidence of legitimacy here and cannot offset the external detections.

Closing Assessment

The site should be limited to passive, read-only viewing, if it is visited at all. No account login, credential entry, wallet connection, deposit, or other financial interaction should be attempted. Any prior contact or funds already sent should be treated as potentially compromised and reported to the relevant bank, exchange, or fraud authority.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.