Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
walletgfix.pages.dev is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 3 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website presents itself as "Wallet Sync Services", a single-page, wallet-themed service. It is hosted on a free shared Cloudflare Pages subdomain rather than a dedicated branded domain, and its page title points to a different, separate domain name. The homepage carries a short block of text with no visible company, product or contact detail. Its apparent purpose is to prompt visitors to "sync" a cryptocurrency wallet with an external service, a pattern commonly used to harvest wallet access.
Scam/Impersonation Risk
This is the dominant concern. Several independent threat-intelligence engines currently rate the site as malicious or suspicious, and it is blacklisted on external reputation sources. That is a confirmed contradiction and decisive for the assessment. No conflicting legal identities and no brand impersonation were established, so the risk comes from reputation rather than identity inconsistency. The offering is wallet "synchronisation", a category in which a visitor is typically asked to connect a wallet or enter recovery credentials. Those are the actions that cause irreversible loss of crypto-assets. The page title names a different domain from the one actually serving the content, which suggests the page may be a front for an unrelated service. In automated sandbox runs the page made no external network calls, and no wallet-connection prompts, clipboard tampering or hidden forms were detected. That behaviour does not offset the reputation findings, because a page that is clean when loaded can change what it presents after interaction. The page restructured heavily after interaction, with a large volume of DOM changes and repeated console errors, consistent with content that is built dynamically. No suspicious contact-email anomaly was observed. Evidence:
- Homepage: the page title reads "Wallet Sync Services" and references a separate domain name, a mismatch with the hosting domain.
- Reputation checks: three engines flagged the domain as malicious and one as suspicious, with an external blacklist hit confirmed.
- Behavioural sandbox (3 of 3 runs completed): 0 external requests, but 1,393 DOM mutations after interaction and 6 console errors.
Regulatory Verification Notes
The homepage discloses no operating company, jurisdiction, licence, registration number or terms of service, and no legal or about pages were evidenced. For a service that asks visitors to link financial assets, this is a significant content gap. Ownership and governance are opaque, and the real-world operator cannot be linked to any identifiable person or brand. The domain is a subdomain of a shared hosting platform, so it carries no independent registration history to anchor identity. No third-party broker or regulator listing matched this site. The absence of regulatory standing is therefore unmitigated by any independent corroboration. Evidence:
- Homepage: no company name, licence reference, registration number, address or legal documentation is shown.
- Hosting: served from AS13335 (Cloudflare, Inc., US), a shared platform that says nothing about the operator's identity.
- Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-27 with 86 days remaining. DV certification confirms control of the domain, not the operator's identity.
- Broker and regulator lookups: no match found.
What to Verify Next
Wallet connection, seed phrases, private keys and signing requests should not be provided to this site. Anyone who has already interacted with it should treat any exposed wallet as potentially compromised, move the remaining assets to a newly created wallet, and revoke any token approvals granted. Any claim of affiliation should be checked only through the official site of the named wallet or protocol, reached independently of this page and not through links on it. A user who believes they were directed here should confirm the origin of that referral through an offline or otherwise independent route, and confirm official support channels the same way. Evidence:
- Homepage: the page asks for wallet "sync" activity but names no verifiable provider to check against.
- Page title: the referenced separate domain would need to be assessed independently, not through this site.
- Hosting: a free shared subdomain provides no accountable operator to contact.
Summary Verdict
Available evidence supports a high-risk assessment. Confirmed adverse reputation findings, an unidentifiable operator and a wallet-access theme together outweigh the technically valid transport security and clean sandbox behaviour. The site is not suitable for any sensitive or financial interaction.
Infrastructure Integrity
The site is served entirely through Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The origin server is not observable, so hosting cannot be verified independently and content can be changed quickly behind the edge. The platform is reputable, with a clean abuse history on the shared addresses, so this is a mitigating factor only. It does not offset the external threat detections and says nothing about the legitimacy of the operator.
Closing Assessment
Do not connect a wallet, enter recovery phrases or credentials, or make any payment on this site. Browsing should be limited to passive viewing, and any contact with the site should be treated as hostile until it is independently cleared.
Written analysis generated 2026-11-01 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, registration and ownership, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
03 Behaviour in a sandbox
- The structure of the page changed sharply while it was loading.Behaviour in a sandbox
rule:BEHAV_DOM_DENSITY_SPIKE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of walletgfix.pages.dev.
- The request stayed on walletgfix.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f93 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about walletgfix.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.