Is securywallets.vercel.app a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page promotional site hosted on a shared application-hosting subdomain. It advertises a "Secury Wallet ($SEC) Token Presale" and offers "Crypto Presale Access". Its apparent purpose is to solicit participation in a pre-launch cryptocurrency token sale tied to a wallet product, a model that usually asks visitors to commit funds or wallet access before any product exists.

Scam/Impersonation Risk

This assessment is high-risk and rests on confirmed external detections. The site is currently blacklisted. Multiple independent security sources flag it, including a major browser-safety service that classifies it under a social-engineering threat category, the category used for deceptive pages that trick visitors into harmful actions. Several leading security vendors independently reach the same conclusion. Those detections alone support a cautionary posture. They fit the presale-lure pattern, in which a branded token offering is used to attract visitors. No conflicting legal entities or brand impersonation were identified, so the risk comes from the confirmed threat listings, not from contradictory identity claims. The only mitigating behavior seen was in a sandboxed visit: the page made no calls to outside servers, did not prompt a wallet connection, and did not attempt clipboard manipulation or hidden form submission. Absence of those behaviors does not offset the listings. The page also showed heavy dynamic change after interaction, which fits a script-driven presale front end. It was not enough on its own to establish a mechanism. Evidence:

• Homepage: the page title promotes a "$SEC" token presale and "crypto presale access", framing the site as a pre-sale solicitation.
• The site's reputation record: a browser-safety service flags it for social engineering, and multiple leading security vendors independently flag it as malicious.
• Sandboxed behavioral run (3 of 3 runs completed): no external requests, no wallet-connect prompts and no hidden forms, but 9 console errors and a large page-structure change after interaction.

Regulatory Verification Notes

No licensing, registration or regulated-entity status could be linked to this site. The evidence contains no confirmed third-party regulatory or broker-database match, and the independent identity of the operator remains unconfirmed. Token presales raise investor-protection and securities-law questions in most jurisdictions, so an offering of this kind would ordinarily be expected to disclose its issuing entity, jurisdiction and terms. Nothing in the evidence shows such disclosures, and the absence of corroborating governance information adds to the cautionary picture. That gap is a verification matter and is secondary to the confirmed threat listings. The site is served from a shared cloud platform subdomain, not from an independently registered brand domain. That makes standalone corporate attribution harder. Evidence:

• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport security: TLS certificate issued by WR1 at domain-validated (DV) level, valid to 2026-11-27. DV confirms only control of the domain, not the identity of the operator.
• Homepage: no regulated-entity identification, license reference or issuer details were evident in the captured content.

What to Verify Next

Any contact with this site should be preceded by checks that do not rely on the site's own claims. First, confirm whether a legally registered entity behind "Secury Wallet" and the "$SEC" token exists in the registry of the jurisdiction it claims. Second, check whether any token presale has been announced through verifiable channels, such as an established project website or official social accounts reached by independent search and not by links on this page. Third, review the current status of the threat listings with the relevant security providers before reassessing. If the site has been compromised or flagged in error, the listing owners are the ones who can confirm its removal. Fourth, confirm any official support or contact channels offline or through an independent route. Evidence:

• Homepage: the presale offer cannot be matched to a verified issuer from the captured content.
• Reputation record: the active threat listings are the principal item to recheck.
• Identity assessment: the operator's real-world identity is currently unconfirmed.

Summary Verdict

The site presents a critical, elevated-risk trust posture. Confirmed blacklisting and independent security detections override the technically sound transport encryption and the quiet behavior seen in sandboxed testing. The assessment is a clearly cautionary one.

Infrastructure Integrity

The site sits behind a trusted content-delivery and edge layer. All observed addresses are edge servers, so the origin host was not observable. The edge layer is a mitigating factor only and cannot offset the reputational risk. The 85 abuse reports on one of the edge addresses belong to the shared provider infrastructure used by many unrelated tenants. They carry a zero confidence score and the address is whitelisted, so they are discounted and not attributed to this site. Edge-only visibility also limits independent verification of the hosting and means content could be swapped quickly without notice.

Closing Assessment

Treat the site as unsafe for any sensitive interaction. Do not log in, submit credentials, connect a wallet or send funds. Limit any contact to passive viewing in an isolated environment, and reassess only after the threat listings are cleared and the issuer is independently verified.

Signals weighed against the site

• AbuseIPDB: 85 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.