site-7880365033-coinvaultsupport-com.pages.dev: TrustSniffer assessment: 0/100

Overview

This website is an anonymous, free-tier subdomain on a shared web-publishing platform. Its hostname is built to read as a cryptocurrency "vault" support desk. It presents no usable storefront or documentation to an automated visitor. The only content captured was a short platform interstitial titled "Suspected Phishing", returned with an access-denied status. Its apparent purpose is to pose as customer support for a crypto wallet or custody service, a pattern commonly used to harvest recovery phrases, credentials, or payments.

Scam/Impersonation Risk

The overall assessment is clearly cautionary. Several independent threat-intelligence sources currently flag the site, and a confirmed blacklist listing is in effect. The hosting platform itself intercepted the page with a suspected-phishing warning, which is a strong corroborating signal. The hostname places a support-desk and crypto-custody name on a disposable shared subdomain rather than on an organisation's own registered domain. That is characteristic of support-impersonation lures, although no specific brand has been confirmed as being copied. The sandbox found no wallet-connection prompts, clipboard tampering, hidden forms, or password forms posting to outside parties. These absences do not offset the listing, because the page content served to the sandbox was only the warning screen. The page's real behaviour could therefore not be fully observed. No conflicting legal identities were found, but the site's real-world operator is not independently identified. Evidence:

• Homepage: the captured page was a platform warning titled "Suspected Phishing", returned with an access-denied status and about 380 characters of text.
• Homepage: multiple threat-intelligence engines classify the site as malicious or suspicious, and an external blacklist listing is active.
• Behavioural sandbox, 3 of 3 runs: 51 external background requests and 6 external form submissions, with external traffic reaching 97% of requests at its peak. All went to known, whitelisted destinations.
• Behavioural sandbox: 10 console errors and 1,508 page mutations after interaction, which indicates heavy dynamic content rewriting.

Regulatory Verification Notes

No licensing, corporate registration, or legal-entity disclosure could be assessed. The only page content obtained was the warning interstitial, so there were no terms, privacy, or about pages to examine. A site presenting itself as crypto custody or support would normally be expected to show a regulated operator and registration details. None are observable, and no third-party broker or regulatory record matched this site. Even if such claims later appeared, they could not be treated as credible while the active threat listings stand. The transport-layer and hosting facts below are real but do not authenticate the operator. Evidence:

• Transport encryption: a domain-validated certificate from issuer WE1, valid to 2026-11-27 with 32 days remaining. This confirms encryption only, not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US), the registry being ARIN.
• Homepage: no licence, registration number, or company name appears in the captured content, and no broker-database match exists.

What to Verify Next

Do not authenticate or transact with this site. Anyone who reached it through a link, advert, message, or search result should trace where that link came from. They should then contact the real service they believe they are dealing with, using contact details from that provider's own official channels or its regulated registry entry, never details supplied by this site. Anyone who has already entered a recovery phrase, password, or payment details should treat that credential as compromised and move assets or reset access through the legitimate provider. The suspected-phishing report should also go to the hosting platform and the relevant national cybercrime reporting body. Evidence:

• Homepage: the platform's own warning designates the site as suspected phishing.
• Hostname: a support-style crypto name on a shared free-hosting subdomain rather than an independently registered brand domain.
• Reputation: the active blacklist listing and multiple malicious detections remain unresolved.

Summary Verdict

The site is assessed as high-risk, with a decisive reputational basis. Active threat detections and a hosting-platform phishing warning override the technically sound surface features. Operator identity is unconfirmed, and the available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are edge nodes, and no origin server address was observable. The platform's bot-challenge layer is also what produced the blocked capture. This protection and the valid TLS configuration are mitigating technical factors only. They are shared by legitimate and malicious tenants alike and cannot offset the reputation risk. The edge-only visibility also prevents independent hosting verification, so content on the site could change quickly without notice.

Closing Assessment

Treat the site as unsafe for any login, credential entry, wallet interaction, or payment. At most, it should be viewed passively from an isolated environment. Anyone who suspects exposure should act immediately to secure their accounts and assets.