Is devwatchbuild.me a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presented at devwatchbuild.me is a single-page web property titled "DEVWATCH — Solana Wallet Analysis". It presents itself as an analytics-style tool for examining Solana blockchain wallets. The apparent purpose is crypto-asset tooling aimed at wallet holders and traders. The captured page carries a short block of text and no clearly stated operator, company or service terms.

Scam/Impersonation Risk

Contradictory signals are present, and this is the decisive factor in the assessment. Multiple independent threat-detection engines currently flag the domain as malicious, and one tier-one security vendor is among them. The domain is therefore treated as confirmed blacklisted. The domain is also only weeks old. That fits the pattern of disposable infrastructure stood up quickly around a crypto-themed lure, and it leaves no track record to offset the detections. A wallet-analysis theme is a common pretext for drawing users into connecting wallets or signing transactions. The sandbox did not observe wallet-connection prompts, clipboard tampering, hidden forms, cloaking or credential posts to external hosts during three sessions. These observations do not outweigh the blacklist status, because malicious behaviour can be introduced or switched on after a site is first indexed. Most of the page's network activity went to third-party hosts. That is a further reason not to treat the observed benign behaviour as a guarantee. No conflicting legal identities were found. No impersonation of a specific known brand was confirmed. Evidence:

• Homepage: five security engines rate the domain malicious and one rates it suspicious, including a tier-one vendor. This produces a confirmed blacklist status.
• Domain provenance: registered 2026-09-09 (~0.12 years old, about six weeks), with 138 archive snapshots in 2026 (1 year tracked). This is a very young footprint with no established history.
• Behavioural sandbox on the homepage: three successful runs, no wallet-connect, wallet-drainer, clipboard-hijack, hidden-form or cloaking activity detected.

Regulatory Verification Notes

The site offers a crypto wallet-analysis service. No licensing, registration or corporate disclosure was assessable on the captured page, and no legal or terms pages were evident. This is a disclosure gap, not evidence of wrongdoing in itself. The wrongdoing indicators come from the threat detections above. The real-world operator is not independently tied to any brand or person, so no claim about who runs the site can be treated as established. No third-party broker or regulator warning matched this domain. The absence of a match is neither a clearance nor a verdict. Evidence:

• Homepage: no operator name, license or registration reference found in the captured text.
• Registration: domain registered through NameSilo, LLC, with an expiry of 2027-09-09.
• Hosting and encryption: served from AS13335; the TLS certificate was issued by WE1 (DV, domain-validated only), valid to 2026-12-08, with about 46 days remaining.

What to Verify Next

No engagement is advised until the detections are cleared. If there is a legitimate reason to assess the site, check the domain's current status directly with several independent threat-intelligence sources, and confirm whether the flags have been withdrawn. Any claim of an affiliation with a known project or team should be tested against that project's own official channels, reached by an independent route rather than through links on this site. Wallet-security hygiene applies throughout. A dedicated, empty test wallet should be used for any examination, and no seed phrase, signature or approval should be provided. Evidence:

• Homepage title: "DEVWATCH — Solana Wallet Analysis" is the only product claim captured, so any affiliation claims need external corroboration.
• Network behaviour: about four-fifths of the homepage's peak network activity was directed to third-party hosts, which makes the destination of any submitted data a key unknown.

Summary Verdict

The assessment is clearly cautionary and security-forward. Confirmed threat-intelligence detections and a very recent, unestablished domain dominate, and no positive signal is sufficient to offset them. The site is suitable at most for passive, read-only observation and is unsuitable for login, credential entry or any financial interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF. All four observed addresses are edge nodes, and the origin server was not observable. Valid transport encryption from a recognized issuer and a mainstream network provider are mitigating factors only. They do not demonstrate legitimacy, and they cannot offset the external threat detections. Edge-only visibility also prevents independent verification of the real hosting and can mask rapid content swaps.

Closing Assessment

Do not log in, connect a wallet, sign transactions, or provide credentials or funds to this site. Limit any contact to read-only viewing, preferably from an isolated environment, and revisit only if independent sources clear the domain.