Is allpresales.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

allpresales.live is a newly established, single-entry-page website branded "ALLPRESALES" that headlines an "Early Access at -70%" offer. It presents itself as a presale or early-access promotion, with a discount offered to early participants. The apparent business model is a discount-driven presale, which relies on visitors acting on the promised reduction. The homepage carries only a short block of text.

Scam/Impersonation Risk

This site shows confirmed contradictory signals. Several major security vendors independently classify the domain as malicious or suspicious, and it is blacklisted by external threat-intelligence sources. Reputation signals of this kind are the strongest available indicator of abusive use. Presale-style sites are a well-known lure for payment-diversion and fund-collection schemes. The "-70%" early-access headline is an unverifiable urgency-and-discount claim of the type those schemes rely on. The domain was registered only weeks before this assessment and is very young. A brand-new domain with a heavily discounted offer and an active blacklist listing is a convergent high-risk pattern. The sandbox did not observe wallet-connection attempts, clipboard manipulation, hidden forms, credential posts to external hosts or content cloaking. That reduces the likelihood of an automated drainer on the captured page, but it does not offset the reputation findings. No conflicting legal identities or confirmed brand impersonation were observed. Evidence:

• Homepage: the headline promises "Early Access at -70%" and carries no verifiable substantiation of the discount.
• Domain registered 2026-09-04 (~50 days old, about 0.14 years).
• Web-archive history is minimal: 3 snapshots between 2026-09-05 and 2026-09-22, all within the domain's first weeks.
• Behavioural sandbox, 3 successful runs: no wallet-connect, clipboard-write, hidden-form or cloaking activity. Observed external requests went only to recognised third-party services.

Regulatory Verification Notes

The captured homepage does not allow independent connection of the site to any named legal entity, licensed operator or regulated business, and the real-world operator remains unverified. Ownership and governance information is opaque. The registration record shows no identifiable owner. The site presents no corporate identity that could be checked against a registry. No third-party broker or regulatory-database match exists for the site. A presale offering involves the sale of a financial or quasi-financial product, so the absence of any disclosed issuer, licence or registration is material, and it compounds the adverse reputation findings. It is a verification gap, not proof of wrongdoing on its own. The site's valid transport encryption confirms only that traffic is encrypted. It says nothing about who operates the site or whether the offer is genuine. Evidence:

• Homepage: no company name, licence reference or regulatory registration is presented.
• Registered through Global Domain Group LLC, with an incomplete owner record; registration expires 2027-09-04.
• TLS certificate issued by WE1 (DV, domain validation only, no organisation vetting), valid to 2026-12-03.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any claim about the presale, including its issuer, token, discount and timeline, should be tested against sources independent of this site. This means the project's officially published channels, reached through a route that does not pass through this domain, and any competent regulator's public register. The operator's identity should be established before anything else is considered. The reputation listing should be re-checked with the flagging security vendors, or through the domain owner's own remediation notice, to learn whether the site has been cleaned or was compromised. Any payment or wallet instruction arriving through this site should be confirmed offline, through an official contact channel obtained separately. Evidence:

• Homepage: the discount offer cannot be traced to a named issuer or to a published terms document.
• Registration record: owner details are incomplete, so identity cannot be established from the domain record.
• External reputation: multiple security vendors currently list the domain as malicious, so a later re-check against those vendors is the fastest way to detect a status change.

Summary Verdict

The overall posture is high risk. External threat detections carry decisive weight, and the site's youth and unverifiable identity reinforce them. The technical hygiene of the site does not outweigh its adverse reputation.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers. The origin server was not observable. That limits independent verification of where the content is hosted, and it can mask rapid content changes behind the same edge addresses. The protective infrastructure and valid certificate are mitigating factors only. They do not offset the external threat detections and do not indicate legitimacy.

Closing Assessment

Interaction beyond passive viewing is not advised. No credentials, wallet connections, payments or personal data should be submitted, and no files should be downloaded from this site. If the site must be examined, it should be viewed in an isolated environment, and any exposure should be reported to the relevant security team.