Research dispatches from the TrustSniffer analysis engine. Web forensics, on-chain risk patterns, phishing infrastructure teardowns, and platform intelligence.
A deep-dive into the CDN-abuse, subdomain-takeover, and certificate-harvesting techniques used by organised phishing operations targeting Web3 users in 2025–2026.
Our graph-traversal engine now traces laundered capital across TRON and EVM chains simultaneously, assigning a confidence-weighted taint score at every hop.
An emerging pattern in our DNS telemetry shows adversaries exploiting DoH resolvers to tunnel command-and-control traffic past enterprise firewalls.
We've replaced subscription tiers with a flexible energy credit system. Earn credits through GitHub integration, buy packs, and run only the analyses you need.
We analysed the lifecycle of 4,200 fraudulent Telegram channels — from creation to termination — mapping their domain infrastructure, wallet clusters, and victim acquisition funnels.
Factory contract patterns now account for 34% of rug-pull deployments we detect. Here's how we fingerprint them at the bytecode level before they gain liquidity.
Certificate Transparency logs are public and real-time. We explain how we mine them to detect newly registered phishing domains minutes after they receive a certificate.