Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
xamanwebwallet.co is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Governance Risk.
- Domain age: less than 1 year (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Regulatory Verification Notes
The captured homepage content could not be tied to a named operating entity, registered company or financial licence. Independent identity verification of the operator has not been established. The automated page analysis was also unavailable, so the identity assessment is unconfirmed and low in confidence. Registration details do not expose a clearly identifiable owner, so ownership and governance remain opaque. For a service that invites users to manage digital assets, this is a transparency gap. It is not by itself evidence of wrongdoing, because no conflicting identities or third-party regulatory warnings were found. No broker-reputation record matched this domain. The domain is registered through the corporate registrar NICENIC International Group Co., Limited, with registration running to 2027. This is consistent with an ordinary commercial setup but says nothing about who operates the site. Evidence: Homepage content (captured in full) names no operating company, licence or registration number. Registrar: NICENIC International Group Co., Limited. Expiry 2027-09-05. TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-04 with 43 days remaining. DV confirms domain control, not organisational identity. Served from AS13335 (Cloudflare, Inc., US).
Regulatory Verification Notes
The captured homepage content could not be tied to a named operating entity, registered company or financial licence. Independent identity verification of the operator has not been established. The automated page analysis was also unavailable, so the identity assessment is unconfirmed and low in confidence. Registration details do not expose a clearly identifiable owner, so ownership and governance remain opaque. For a service that invites users to manage digital assets, this is a transparency gap. It is not by itself evidence of wrongdoing, because no conflicting identities or third-party regulatory warnings were found. No broker-reputation record matched this domain. The domain is registered through the corporate registrar NICENIC International Group Co., Limited, with registration running to 2027. This is consistent with an ordinary commercial setup but says nothing about who operates the site. Evidence:
- Homepage content (captured in full) names no operating company, licence or registration number.
- Registrar: NICENIC International Group Co., Limited. Expiry 2027-09-05.
- TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-04 with 43 days remaining. DV confirms domain control, not organisational identity.
- Served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Before any login or financial interaction, confirm that this domain is the one published by the wallet's official project. Use an independent route, such as the project's verified social accounts, its official documentation or a known-good bookmark. Check the claims made on the homepage against the project's own announcements. Confirm the official support and contact channels independently. Look for a named operating entity and any applicable registration in the relevant jurisdiction. Test unfamiliar wallet flows with a negligible amount, or without connecting a funded wallet, until the operator is confirmed. Evidence:
- Homepage title uses a wallet brand name and a "trusted by millions" claim that can be cross-checked externally.
- No named operator on the captured homepage to check against a registry.
- Domain is about six weeks old, so any external track record is limited.
Summary Verdict
The available evidence supports a low-trust, cautious posture. The domain's recency, the limited identity information and the one unconfirmed reputation note outweigh its technical hygiene. The site is not shown to be malicious. It also lacks the established history and attributable operator that would justify confidence, and its identity remains unverified.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN and web application firewall. All four observed addresses are edge nodes, and no origin server was visible, so hosting cannot be independently verified. Because of that, content could be changed quickly without leaving a trace in network data. The site returned stable responses across all three test runs and applied bot protection. A valid TLS certificate from a recognised issuer is also in place. These are mitigating factors only and do not establish legitimacy. A heuristic flag for a young domain with sparse subdomains is unconfirmed. It carries no weight beyond the registration recency already noted, because it rests on the same single fact and has no independent corroboration.
Closing Assessment
Browsing the site for information is reasonable. Entering credentials, connecting a funded wallet or moving funds should wait until the site is confirmed as the official service through independent channels.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by hosting and network, behaviour in a sandbox, registration and ownership.
01 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - Many of the responses the page received looked generated rather than served normally.Behaviour in a sandbox
rule:BEHAV_SYNTHETIC_RESPONSES_HIGH
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of xamanwebwallet.co.
- The request stayed on xamanwebwallet.co. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-05. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::ac43:d090 |
| Name servers | KIRK.NS.CLOUDFLARE.COM, ROSALIE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-04 |
| Domain age | 0.13 years (continuous registration) |
| Domain expiry | 2027-09-05 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about xamanwebwallet.co at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.