Is wallet-x.net a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

wallet-x.net is a recently registered website whose name points to a cryptocurrency-wallet or digital-asset service. Automated visitors to its homepage reached only a Cloudflare verification interstitial, so the site's own product claims could not be read. The apparent purpose is a wallet-related web service, but its real function and operator are not independently established.

Scam/Impersonation Risk

Material contradictions are present, and this is the dominant finding. The domain is confirmed as blacklisted across several independent reputation sources. A major browser-protection service classifies it under its social-engineering category, which covers deceptive pages built to harvest credentials or funds. A sizeable group of security engines also flags it as malicious, including several leading vendors. For a domain naming itself after a wallet, this pattern is typical of credential-harvesting or wallet-draining infrastructure. The domain is also only a few months old, so it has no operating history that could offset these detections. In sandbox sessions, nearly all outbound traffic went to third-party hosts, with repeated outbound POST requests and a high volume of browser console errors. None of that traffic went to unrecognised destinations. No wallet-connection prompts, clipboard tampering, hidden forms, or external password forms were observed. The absence of those behaviours does not offset the blacklist findings. No conflicting legal-entity names were identified, and no specific brand impersonation was confirmed. Evidence:

• Homepage and domain reputation: the domain is flagged by a browser-protection service as social engineering and carries 10 malicious and 1 suspicious verdicts from reputation engines.
• Domain registration: registered 2026-07-30 (~0.25 years old), through PDR Ltd. d/b/a PublicDomainRegistry.com.
• Homepage behaviour: 27 third-party XHR requests and 9 third-party POST requests across 3 sandbox runs, with up to 97.6% of traffic directed externally and 18 console errors.

Regulatory Verification Notes

The evidence does not link the site to any regulated or licensed entity. No regulator record was matched, and no third-party broker-reputation record exists for the domain. The identity of the real-world operator is unconfirmed, and the available signals do not support treating any on-site identity claim as proof. For a service that implies custody or handling of digital assets, this is a significant gap. Combined with the confirmed blacklist findings, the lack of a verifiable regulated counterparty leaves no recourse path for users who deposit funds or expose credentials. Evidence:

• Transport security: a valid domain-validated TLS certificate issued by WE1, valid to 2026-12-27 (59 days remaining). Domain-validated certificates confirm only domain control, not organisational identity.
• Network posture: served from AS13335 (Cloudflare, Inc., US).
• Third-party registry context: no broker or regulatory match was found for the domain.

What to Verify Next

Any organisation or brand that the site claims to represent should be contacted through its officially published channels, reached independently of this domain, to confirm whether wallet-x.net is a sanctioned property. Any claimed licence should be checked directly in the relevant financial or virtual-asset regulator's public registry before any engagement. Wallet connections, seed-phrase entry, and deposits should be withheld. The domain should be reported to the browser-protection and registrar abuse channels if it was reached through an unsolicited message, advertisement, or social-media link. Evidence:

• Reputation findings: the confirmed blacklist and social-engineering classification make independent confirmation of legitimacy a prerequisite for any interaction.
• Registration data: the domain was registered in July 2026 through a retail registrar, and no operating history precedes it.
• Regulatory context: no registry match exists for the domain.

Summary Verdict

The overall posture is critical. Multiple independent reputation sources, led by a social-engineering classification and a confirmed blacklist, converge on this site as carrying a severe risk of harm to visitors. Its short operating history gives no countervailing record, and the real-world operator remains unverified. The evidence supports a clearly cautionary, high-risk assessment.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed IP address is a Cloudflare edge address, so the origin host could not be observed. A bot-challenge page is also served to automated clients. These protections are mitigating factors only: they show competent perimeter configuration, not trustworthiness. Because the origin is hidden, the content behind the edge can change without external visibility. Infrastructure quality cannot offset the reputational findings.

Closing Assessment

At most, the site should be viewed passively. Logging in, entering credentials or recovery phrases, connecting a wallet, and making any financial transaction should be avoided entirely. Anyone who has already interacted with the site should move assets to a fresh wallet and change reused passwords.