Is allocation-consensus.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website allocation-consensus.live presents itself as "CONSENSUS, a company game on Uniswap v4", a browser-based game built around the Uniswap v4 decentralized-exchange protocol. The captured homepage carries a substantial amount of text. Its apparent purpose is to draw visitors into an on-chain game or token-linked experience. The page content could not be semantically analysed, so the operator, the mechanics and the economic model are not independently established.

Scam/Impersonation Risk

Several independent reputation sources agree on a confirmed blacklist listing for this domain. A substantial group of security engines classifies it as malicious or suspicious, and two tier-one security vendors are among them. Infrastructure protections cannot offset this. The domain is also very newly registered, and its short archive history is consistent with a recent launch rather than an established property. Newly registered domains presenting a crypto-adjacent "game" on a well-known protocol brand are a common pattern for token-launch and wallet-interaction lures. That fits the "company game on Uniswap v4" title, which borrows the credibility of an established exchange protocol. No conflicting legal identities and no explicit brand impersonation were observed. The risk therefore rests on the blacklist, the engine detections and the domain's recency. Behavioral testing found no wallet-connect prompts, clipboard tampering, hidden credential forms, or cloaking. However, the homepage triggered three background requests to external destinations outside the expected set, and one of those destinations was unrecognized. The page's content also changed heavily after interaction, with a very large number of structural changes. This indicates a script-driven interface whose behavior could change after the capture. Any wallet-signing or token-approval flow should be treated as untrusted while the blacklist stands. Evidence:

• Homepage: reputation sources flagged the domain as malicious (8 engines) and suspicious (2 engines), including tier-one vendors Fortinet and Kaspersky. It is listed on an external blacklist.
• Domain registered 2026-09-13 (~0.1 years, 38 days old). The web archive holds 5 snapshots between 2026-09-13 and 2026-09-22 (1 year tracked).
• Homepage behavior across 3 runs: 3 external background requests to non-whitelisted destinations (about 90% external share at peak) and 1,307 page-structure mutations after interaction. No wallet-connect, clipboard-write, or hidden-form activity was recorded.

Regulatory Verification Notes

The captured homepage text gives no verifiable corporate entity, licence or registration for a site that invites participation in a token-based game. This is a verification gap rather than proof of wrongdoing, but here it coincides with the reputational contradictions above. Ownership details for the domain are incomplete, and the operator's identity could not be tied to any real-world person or company. No third-party broker or regulator listing matched the site, so there is no regulatory standing to rely on. Apparent legitimacy therefore cannot be inferred from any external registry. Evidence:

• Homepage: no named legal entity, licence number or regulator reference was identified in the captured content.
• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-09-13.
• Transport security: TLS certificate issued by WE1 (domain-validated only, valid to 2026-12-12, 51 days remaining). This confirms encryption, not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the game's operator should be identified through channels independent of the site, such as the official Uniswap documentation and verified project announcements. These should confirm whether any "CONSENSUS" game or related contract genuinely exists. Any smart-contract address the site presents should be checked on a public block explorer for deployer history, age and verified source code. Official social and support channels should be confirmed through an offline or independent route, not through links on the site. The blacklist entries should be re-checked directly with the listing sources to see whether they have been cleared. Evidence:

• Homepage: the site names a Uniswap v4 association, which can be checked against the protocol's official documentation.
• Behavioral capture: three unrecognized external background requests warrant review of the destinations that the page contacts.
• Reputation findings: the blacklist and engine detections are the current state to be re-checked at the source.

Summary Verdict

The evidence converges on an elevated-risk, critical-trust posture. A confirmed blacklist and broad engine detections combine with a newly established domain and an unverified operator. No credible legitimacy evidence offsets these signals, and technical hygiene and apparent professionalism do not change the outcome.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All observed addresses are edge nodes, and the origin server is not visible, so hosting cannot be independently verified. The protection is a mitigating factor only. It improves availability and shields the origin, but it provides no assurance about the operator's honesty and cannot offset the reputation findings. A valid TLS certificate is present, but it is domain-validated only.

Closing Assessment

Interaction beyond passive viewing is not advisable. Wallet connections, token approvals, logins, credential entry and any financial transaction should be avoided. Anyone who has already interacted with the site should review and revoke token approvals and monitor the affected wallets.