Is web3-checkout.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page, near-empty landing page that shows a "Wallet connect" button and a Russian-language label reading "Нажми меня" ("Press me"). It names no product, service, pricing, operator, or contact route. Its apparent purpose is to prompt visitors to link a crypto wallet, but the page gives no explanation of what the connection is for or what the visitor would receive.

Scam/Impersonation Risk

Confirmed contradictions are present. The domain is blacklisted: several independent security engines currently flag it as malicious, including multiple top-tier vendors. That detection volume triggered an automatic severity cap on the assessment. The page offers no counter-narrative to weigh against these detections. It has no stated service, no legal identity, and no terms. Its only interactive element is a wallet-connection prompt, which is the entry point most often abused in wallet-draining and phishing schemes. The browser sandbox recorded no wallet-drainer activity, no hidden forms, no clipboard manipulation, and no external network calls across three runs. That shows the page is inert at present, but it does not offset the blacklisting. Content on a page this thin can be swapped quickly, and a wallet prompt with no explanation gives a visitor nothing to verify. No brand impersonation and no conflicting legal identities were observed, because the site names no entity at all. The risk rests on the blacklisting and the unexplained wallet action, not on a copied brand. Evidence:

• Homepage: the only visible content is a wallet-connect button and the "Press me" label, with no service description, pricing, or legal text.
• Domain provenance: registered on 2026-09-28 (~22 days old, 0.06 years), so the site has almost no operating history.
• Web-archive depth: 2 snapshots, both from 2026-09-28 (1 year tracked), which shows no established track record.
• Sandbox behavior: three successful runs showed zero external requests and no hidden forms, which indicates a static page at present.

Regulatory Verification Notes

The site has no legal, terms, privacy, or about page, so no operator name, jurisdiction, registration number, or financial-services authorization can be assessed. The domain registration shows incomplete owner details, and no real-world operator can be tied to the site. Because the page invites a wallet connection, the absence of any disclosure matters more here than it would on a purely informational site. No third-party broker or regulatory-database match exists for this domain. That is neutral context and neither supports nor undermines the site. The transport-layer and hosting indicators below show only that basic technical hygiene is in place. They say nothing about who runs the site or whether it is authorized to handle user assets. Evidence:

• Homepage and site-wide: no legal entity, license claim, terms, or privacy statement is published.
• Registration: the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with owner details incomplete.
• Transport security: the TLS certificate was issued by YE2 (DV, domain validation only) and is valid to 2026-12-27, so it confirms domain control but not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any interaction, an independent party should establish who operates the domain and what the wallet prompt does. That means seeking an official announcement of the domain from a known, independently verified project or company. The domain should not be trusted on the strength of the page alone. The wallet-connect action should be examined only in an isolated, disposable environment containing no funds, and any signature or approval request it raises should be treated as potentially a transfer authorization. If an operator claims financial or crypto-asset services, that claim should be checked against the relevant regulator's public register. Any official support or contact channel should be confirmed through an independent route and not through this page. Evidence:

• Homepage: no claim of affiliation with any known project, so no brand can be cross-checked.
• Homepage: the page does not say what permissions the wallet connection requests, so its effect cannot be predicted.
• Reputation: the current malicious detections mean the domain's status should be re-checked before any reconsideration.

Summary Verdict

The overall posture is high risk. Confirmed blacklisting, a very recently created domain, and an unexplained wallet prompt on an otherwise empty page converge on an elevated risk assessment that technical hygiene cannot offset. No benign explanation for the site is supported by the available evidence, and its operator remains unidentified.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed address is a Cloudflare edge address. The origin server was not observable, so the real hosting location cannot be independently confirmed. This arrangement can also let content change rapidly without any visible change in hosting. Cloudflare's presence is a mitigating factor only. It is common to legitimate and abusive sites alike and cannot offset the external threat detections.

Closing Assessment

The site should be treated as unsafe for any login, credential entry, wallet connection, or financial interaction. Contact should be limited to passive viewing, if at all. Anyone who has already connected a wallet or approved a transaction on this domain should revoke the permissions immediately and move funds to a fresh wallet.