WHAT WE
ACTUALLY COVER.
TrustSniffer has two engines: on-chain wallet risk for supported blockchains, and website risk for publicly reachable sites. Here's exactly what each one supports today, stated plainly, with its limits, so you know what a result does and doesn't cover.
Networks & assets we support.
TrustSniffer is live on Ethereum and TRON today, on both, addresses are screened for risk, issuer freeze/unfreeze events are detected, funds are taint-traced end-to-end (source and exposure), and wallets can be monitored. The networks marked coming soon are on our roadmap and not yet available.
Every site is checked from eight angles.
A website risk report combines eight independent capture modules. Each looks at a different part of a site; together they feed one trust score and a plain-English verdict.
Page content
Live page text, links, forms, trackers, and an AI-assisted read of what the site claims to be.
Behavior sandbox
Headless-browser run: network calls, redirects, cloaking, and wallet-drainer / clipboard-hijack signatures.
Archive history
Wayback snapshot history, domain age, and repurpose / revival signals.
DNS & infrastructure
DNS records, ASN / registry, CDN detection, and hosting-fragmentation patterns.
Certificate & WHOIS
TLS certificate issuer / validity, WHOIS/RDAP registration, server location, and Tranco rank.
Threat intelligence
VirusTotal and Google Safe Browsing (per-URL) and AbuseIPDB (per-IP) reputation, plus local signatures.
DeFi recognition
Best-effort recognition of established DeFi protocols (category, TVL, chains) to avoid false alarms.
Broker reference
Cross-check against a curated forex / broker reference dataset for finance-related domains.
One score, five clear bands.
A blocked, challenged, or content-thin capture is graded NEEDS REVIEW, never CRITICAL, so a temporarily unavailable but legitimate site is never mislabeled as a scam. Wallet verdicts use their own scale: CLEAR · CAUTION · WARN · DANGER · BLOCK.
What coverage does not mean.
Publicly reachable only. Website analysis needs a public URL. Login-walled, paywalled, or credential-gated content is not analyzed.
Challenges aren't bypassed. Cloudflare and bot challenges are detected and reported, not defeated, those captures grade NEEDS REVIEW.
Live on two chains today. Wallet analysis currently covers Ethereum and TRON. Networks marked coming soon are on the roadmap and not yet analyzed, an address format we recognize is not the same as us analyzing that chain.
Supported assets. Freeze detection follows the stablecoin issuer contracts we ingest, USDT and USDC on Ethereum, USDT on TRON.
Third-party data has caveats. AbuseIPDB is per-IP and a shared host can inherit a neighbour's reputation, so it never alone condemns a domain.
Informational, not a verdict. Every result is a probabilistic assessment from the evidence we could collect, not proof of fraud or a guarantee of safety. See our disclaimer.
Put the coverage to work.
Check a wallet or a website against everything above, free, no account needed to start.