Is smartsoltokenfix.vercel.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website served from a subdomain of a shared application-hosting platform. It presents itself to visitors under the title "Raydium", the name of a well-known decentralized-exchange brand, and its address refers to a "token fix". Its apparent purpose is to offer token- or wallet-related functionality under that borrowed brand name. The evidence does not establish a legitimate business model or an operator behind it.

Scam/Impersonation Risk

The contradictions here are serious and come from reputation intelligence, not from page copy. Several major security vendors independently flag the site as malicious, and external threat intelligence confirms a blacklist listing, which is decisive. The homepage uses a prominent third-party brand title on a generic platform subdomain that the brand does not appear to control. The address text is also close to a lookalike pattern. Taken together, these make the site's claim to the brand unsupported. The evidence neither verifies nor disproves an affiliation with that brand. Wallet-connection prompts, clipboard tampering, hidden forms, credential posts to external hosts, and content cloaking were not observed in the three automated browsing sessions. That absence does not offset the threat listing. Sites of this kind can change behavior after a visitor interacts or after the scan. The page also makes a large share of its network requests to external hosts, and it logged a high number of console errors. Every external call went to a recognized destination, so this reads as a heavy third-party dependency profile, not as proven data exfiltration. No contradictory legal identities were found, and no phishing verdict was returned by the browser-level safe-browsing check. Evidence:

• Homepage: titled "Raydium" but served from a generic shared-platform subdomain, with an address that contains a "token fix" phrase.
• Threat intelligence: 17 engines flagged the domain as malicious and 1 as suspicious, including three tier-one security vendors (Fortinet, Kaspersky, Sophos); the browser-level safe-browsing check did not flag it.
• Behavioral sandbox: 3 of 3 runs succeeded; 20 external XHR calls and 6 external POSTs, all to whitelisted destinations; 24 console errors; no wallet, clipboard, hidden-form or cloaking activity.

Regulatory Verification Notes

The evidence does not connect the site to any identifiable legal operator, licensed financial-services provider, or registered entity. The extent of on-page disclosure could not be confirmed, so no license, registration or governance detail can be credited to the site. The operator remains independently unverified, and the site's association with the brand it displays is unconfirmed. No third-party broker or regulatory-database entry matched this site. That is a lack of corroboration, not a regulatory finding. The security signals in this assessment carry far more weight than any disclosure question, and an eventual disclosure would not change the posture. A valid certificate is present, but it only encrypts the connection. It does not show who operates the site. Evidence:

• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), US-based.
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27, which is soon.
• Third-party broker intelligence: no match for this site or brand name.

What to Verify Next

Any dealings with this site should start from the brand's officially published address, obtained through the brand's verified social or documentation channels. The address should not be taken from this page or from any link that led here. The domain-owner and hosting platform's abuse-reporting routes can be used to ask whether the content has been reviewed or is under an active takedown. A wallet-security tool or the wallet's own transaction-simulation feature should check any request to connect a wallet, sign a message, or approve token spending. Confirm official support and contact channels independently, through the brand's own verified sources. Evidence:

• Homepage: the title presents a well-known brand, but nothing on the evidence trail ties the page to that brand.
• Hosting: the site sits on a shared-platform subdomain, not on a domain the brand is known to control.
• Threat intelligence: the multi-vendor malicious detections remain current.

Summary Verdict

The site carries an elevated, high-risk posture. Current external threat detections are the decisive factor, and no other signal is strong enough to offset them. Apparent technical hygiene and quiet automated-session behavior do not establish legitimacy. The operator's identity is unverified, and the brand association is unsupported.

Infrastructure Integrity

The site is delivered through a recognized, mainstream cloud and edge platform operating inside a major US hosting network. The address space is reputable, and the platform's protections mitigate some exposure. Only edge addresses were visible and the true origin was not observable, so the hosting cannot be independently attributed to a specific operator. A high volume of abuse reports exists against one of the shared edge addresses. These reports relate to the platform's multi-tenant infrastructure and were discounted for that reason. They do not describe this site specifically. The protective infrastructure is therefore only a mitigating factor. It does not reduce the site-specific malicious detections.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, message signing, token approvals, or any financial transaction. Nothing should be downloaded from it. Any contact with this site should be limited to passive viewing in an isolated, non-sensitive browser profile. Anyone who has already interacted with it should treat their credentials and wallet permissions as potentially exposed, rotate or revoke them, and report the page to the hosting platform and to the brand it displays.

Signals weighed against the site

• AbuseIPDB: 87 reports on hosting IP 216.198.79.3 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.