Skip to main content

Is walletnow.app a Scam? Security Check Results - CHN Group Limited Reviews

walletnow.app favicon

Is walletnow.app Safe? Security Analysis for CHN Group Limited

Check if walletnow.app is a scam or legitimate. Free security scan and reviews.

TechnologyN/amedium
ReactNext.jsGoogle Fonts (Roboto)Google Analytics
Analyzed 9/6/2025Completed 9:02:30 AM
63
Security Score
MEDIUM RISK

AI Summary

NOW Wallet, operated by CHN Group Limited, is a secure, non-custodial cryptocurrency wallet offering multi-platform support including mobile and desktop applications. It enables users to store, buy, exchange, and stake a wide range of cryptocurrencies and tokens, leveraging the ChangeNOW platform for fiat-to-crypto transactions. The wallet emphasizes privacy and security by storing funds locally on user devices and not collecting personal data. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency, targeting cryptocurrency users seeking a reliable wallet solution. Technically, the website is built using modern web technologies such as React and Next.js, ensuring fast performance and mobile optimization. It integrates Google Analytics for user behavior tracking and employs standard security headers and HTTPS for secure communications. However, it lacks a visible cookie consent mechanism and detailed security or incident response policies, which are areas for improvement. From a security perspective, the wallet's non-custodial nature and use of security headers contribute to a strong security posture. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business claims, enhancing trustworthiness. Overall, the site scores highly on content quality, technical implementation, security, and business credibility, with minor gaps in privacy compliance. Strategic recommendations include implementing a cookie consent banner to enhance privacy compliance, publishing a dedicated security policy and incident response information, establishing a vulnerability disclosure program, and providing Data Protection Officer contact details. These steps will strengthen user trust and regulatory adherence, supporting the wallet's market position as a secure and user-friendly crypto asset management solution.

Detected Technologies

ReactNext.jsGoogle Fonts (Roboto)Google Analytics

🧠AI Business Intelligence

Technology stack, business insights, and market analysis powered by AI.

Business Intelligence

Market & Strategic Analysis

NOW Wallet operates in the competitive cryptocurrency wallet market, differentiating itself through a non-custodial model that prioritizes user privacy and security. Its integration with the ChangeNOW platform allows seamless fiat-to-crypto purchases, expanding its appeal to both novice and experienced crypto users. The business model is primarily service-oriented, offering free wallet software with monetization likely through exchange fees and staking services. The company maintains a medium-sized presence with a consistent branding strategy and a growing ecosystem of related products such as NOW Nodes and NOW Payments. Partnerships with reputable crypto service providers and positive press coverage enhance its market credibility. The target customer segment includes individual crypto investors and traders seeking secure, multi-asset wallets with staking and NFT capabilities. Growth indicators include multi-language support, extensive platform availability, and active social media engagement.

Extracted Contact Information

Marketing Intelligence Data

Email Addresses (1)

p*****@walletnow.app

Security Posture Analysis

Comprehensive Security Assessment

The security posture of NOW Wallet is robust, leveraging a non-custodial architecture that ensures users retain control over their private keys and funds. The website enforces HTTPS and employs multiple security headers to protect against common web vulnerabilities. No exposed sensitive data or vulnerable libraries were identified in the analysis. However, the absence of a public security policy, incident response plan, and vulnerability disclosure program limits transparency and may hinder rapid response to potential threats. Privacy compliance is partially addressed through a comprehensive privacy policy, but the lack of a cookie consent mechanism is a compliance gap. Overall, the security culture appears mature, but formalizing incident response and disclosure processes would enhance resilience and user trust.

Strategic Recommendations

Priority Actions for Security Improvement

1

Implement a visible cookie consent banner to comply with GDPR and other privacy regulations.

Observations

AI-powered comprehensive website and business analysis.

AI-Enhanced Website Analysis

Business Insights

Company:

CHN Group Limited

Description:

NOW Wallet is a secure, non-custodial, and free crypto wallet available for mobile and desktop. It allows users to buy with fiat, exchange, and store Bitcoin, Ethereum, Monero (XMR), Solana (SOL), and other cryptocurrencies and tokens with confidence.

Key Services:
Non-custodial crypto walletFiat-to-crypto purchaseCrypto exchange and swapsStaking servicesNFT wallet supportdApps connectivity via WalletConnect
Content Quality:

excellent

Branding:

consistent

Technical Stack

Technologies:
ReactNext.jsGoogle Fonts (Roboto)Google Analytics
Frameworks:
Next.js
Platforms:
WebiOSAndroidWindowsmacOSLinux
Performance:

fast

Mobile:

excellent

Accessibility:

good

SEO:

good

Security Assessment

Security Score:
90/100
Best Practices:
  • HTTPS enforced
  • Non-custodial wallet architecture (funds stored on user device)
  • No personal data collection
  • Use of security headers

Analytics & Tracking

Services:
Google Analytics
Tracking Level:moderate
Privacy Compliance:basic

Advertising & Marketing

Transparency Level:basic

Website Quality Assessment

Design Quality:excellent
User Experience:excellent
Content Relevance:excellent
Navigation Clarity:excellent
Professionalism:excellent
Trustworthiness:high

Key Observations

1

Website is fully accessible with no blocking or WAF challenges.

🛡️Security Headers

HTTP security headers analysis and recommendations.

Security Headers

HTTP security headers analysis

20/100
Score

Missing Strict-Transport-Security header

HIGH

Forces HTTPS connections

Missing X-Frame-Options header

HIGH

Prevents clickjacking attacks

Missing X-Content-Type-Options header

MEDIUM

Prevents MIME type sniffing

Missing Content-Security-Policy header

HIGH

Controls resources the browser is allowed to load

Missing X-XSS-Protection header

MEDIUM

Legacy XSS protection (deprecated but still recommended)

Missing Referrer-Policy header

LOW

Controls referrer information sent with requests

Missing Permissions-Policy header

MEDIUM

Controls browser features and APIs

👤GDPR Compliance

Privacy and data protection assessment under GDPR regulations.

GDPR Compliance

Privacy and data protection assessment

53/100
Score

No Cookie Policy found

HIGH

GDPR requires clear information about cookie usage

No Cookie Consent Banner found

HIGH

GDPR requires explicit consent for non-essential cookies

No Data Protection Officer mentioned

LOW

Large organizations may need to designate a DPO under GDPR

Privacy policy may not be GDPR compliant

MEDIUM

Privacy policy lacks explicit GDPR compliance elements

GDPR Compliance Analysis

Privacy Policy85% confidence
Cookie Policy0% confidence
Contact Information Found90% confidence
emailphone

🛡️NIS2 Compliance

Network & Information Security Directive compliance assessment.

NIS2 Compliance

Network & Information Security Directive

17/100
Score

No information security framework found

HIGH

NIS2 requires documented cybersecurity and information security measures

No vulnerability disclosure policy

MEDIUM

NIS2 encourages coordinated vulnerability disclosure

No security policy documentation found

HIGH

NIS2 requires documented cybersecurity governance and risk management

No incident response procedures found

HIGH

NIS2 requires documented incident response and business continuity plans

No business continuity planning found

MEDIUM

NIS2 emphasizes operational resilience and business continuity

No security contact information

HIGH

NIS2 requires clear incident reporting channels

No vulnerability reporting mechanism

MEDIUM

Clear vulnerability reporting supports coordinated disclosure

No NIS2 reference found

LOW

Consider explicitly mentioning NIS2 compliance efforts

📧Email Security

SPF, DKIM, and DMARC validation and email security assessment.

Email Security

SPF, DKIM, and DMARC validation

85/100
Score

Strict DMARC Alignment

LOW

Strict alignment may cause legitimate emails to fail

No BIMI Record

LOW

BIMI displays brand logos in email clients

No MTA-STS Policy

MEDIUM

MTA-STS enforces TLS for email delivery

No TLS-RPT Record

LOW

TLS-RPT provides reporting for email TLS issues

SPF
Sender Policy Framework
DKIM
DomainKeys Identified Mail
DMARC
Domain-based Message Authentication
MX Records
Mail Exchange Records
BIMI
Brand Indicators
MTA-STS
Mail Transfer Agent Security
TLS-RPT
TLS Reporting
DNSSEC
DNS Security
SPF Details
Record:
v=spf1 include:_spf.google.com -all
DNS Lookups:1/10
Policy:-all
DKIM Selectors Found
Selector:google(1416-bit rsa)
DMARC Details
Policy:reject
Aggregate Reports:dmarc@walletnow.app
Forensic Reports:dmarc@walletnow.app

🏆SSL/TLS Security

Certificate validity and encryption analysis.

SSL/TLS Security

Certificate validity and encryption analysis

60/100
Score

SSL Certificate Expires Within 90 Days

MEDIUM

SSL certificate expires in 52 days

Weak SSL Key Length

HIGH

SSL certificate uses 256-bit key, which is considered weak

HSTS Not Enabled

MEDIUM

HTTP Strict Transport Security (HSTS) is not configured

Partial SSL/TLS Assessment

LOW

Completed 3 of 4 security checks due to time constraints

Certificate Details

Subject:walletnow.app
Issuer:WE1
Valid Until:10/28/2025 (52 days)
SANs:walletnow.app, *.walletnow.app

OCSP Status

OCSP Stapling Disabled

📊DNS Health

DNS configuration and security assessment.

DNS Health

DNS configuration and security assessment

85/100
Score

DNSSEC Not Enabled

MEDIUM

DNSSEC is not configured for this domain

CAA Records Not Configured

LOW

Certificate Authority Authorization (CAA) records not found

DNS Records

A Records:104.26.1.2, 104.26.0.2, 172.67.70.165
AAAA Records:2606:4700:20::681a:2, 2606:4700:20::ac43:46a5, 2606:4700:20::681a:102
Name Servers:
boyd.ns.cloudflare.comDNS only
izabella.ns.cloudflare.comDNS only
MX Records:
1: aspmx.l.google.com
10: alt3.aspmx.l.google.com
10: alt4.aspmx.l.google.com
5: alt1.aspmx.l.google.com
5: alt2.aspmx.l.google.com
SOA:Serial: 2382403534, TTL: 1800s

DNSSEC Status

DNSSEC Not Enabled

DNS Performance

Resolution Time:68ms

SPF Analysis

SPF Record:
v=spf1 include:_spf.google.com -all

Network Security

Port scanning and network exposure analysis.

Network Security

Port scanning and network exposure analysis

100/100
Score

Good Network Security Posture

LOW

No unnecessary services detected on common risky ports

🔧Technical Analysis

Detailed technical findings and analysis from AI assessment.

Technical Analysis

Comprehensive security assessment findings

Additional Findings

The website is built on a modern React and Next.js framework, ensuring server-side rendering and fast load times. It uses Google Fonts for typography and integrates Google Analytics for tracking. The site is fully responsive and optimized for mobile devices, with dedicated app downloads for iOS, Android, Windows, macOS, and Linux. SEO best practices are followed with proper meta tags, Open Graph data, and structured JSON-LD for mobile application schema. No CMS was detected, indicating a custom or headless architecture. Hosting details are not explicitly available but the site uses HTTPS with strong SSL configuration. Performance is fast with preloading of critical assets and deferred script loading. Accessibility is good with semantic HTML and ARIA roles. Technical risks are minimal but could be further reduced by enhancing privacy compliance and security transparency.
Analyze Another Website