Is appvirtuals.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "Virtuals Protocol | Society of AI Agents", a token launchpad and trading dashboard for AI-agent crypto tokens. A visitor sees trending, gainer and newly graduated token tables with fully diluted valuations and 24-hour price changes, a live trade feed, liquidity and holder counts, wallet-connected buy controls, and prompts to connect a wallet, create an agent, or log in. Its apparent business model is earning from token launches and from trading activity in the listed tokens, with a veVIRTUAL staking-style component.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The domain is currently on an external blacklist, and a major security vendor independently flags it as malicious. A further pair of engines mark it suspicious. This is the decisive finding. The data does not say what the detections relate to, so the precise nature of the threat is unspecified. Even so, a blacklisting on a page that asks visitors to connect a wallet and place buy orders calls for a clearly cautionary posture. The domain was registered only weeks ago. It uses "Virtuals Protocol" branding on a different, newly created domain name. The evidence does not show whether this site is affiliated with any genuine project of that name, and no brand impersonation was formally detected, so affiliation is unconfirmed rather than disproven. The page itself carries speculative-market characteristics. It lists dozens of tokens, including TIBBIR, VEX, RAXOL, MERRYMEN, PRIZE and WEBSIM. Some are small-cap tokens with thin liquidity. One entry shows a fully diluted valuation in the tens of thousands of dollars against a comparable amount of liquidity. Daily moves range from roughly -24% to nearly +39%. A "Live Trades" feed of truncated wallet addresses and a ticker-like "Just Graduated" tab create an impression of busy activity that visitors cannot verify. No fee terms, token economics or risk warnings accompany the buy controls. Sandbox runs did not observe wallet-drainer behaviour, clipboard hijacking, hidden forms or credential-capture forms, and no guaranteed-return claims were found. These findings are reassuring on a narrow point only and do not offset the blacklisting. Evidence:

• Homepage: wallet-connected "Buy" controls, "Connect Wallet", "Create Agent" and "Login" actions sit beside volatile, low-liquidity token listings with no stated fee terms or risk disclosure.
• Domain registration: the domain was registered on 2026-09-30 (~0.05 years, about 19 days old) and sits on a low-credibility, recently created footprint.
• Web archive: 3 snapshots, all in 2026 (first seen 2026-10-01, last seen 2026-10-09; 1 year tracked), showing no long-standing history.
• Sandbox behaviour (3 successful runs): no wallet-drainer, clipboard-hijack, hidden-form or cloaking activity was recorded.

Regulatory Verification Notes

The homepage links to terms, a launchpad agreement and a privacy policy. None of the visible content names a legal operator, registered company, business address, licensing authority or registration number, and the site claims no licence. It also offers no risk disclosure or fee schedule for a product that handles user funds. That matters more here than it would for a passive site, because the activity is financial: token purchases and launches. The domain's registration details are incomplete, so no operator can be tied to the site through them. No third-party broker or regulatory-database record was matched, so no external reputational signal exists in either direction on licensing. These are verification gaps. They are not proof of fraud in themselves, but they compound the blacklisting above. Evidence:

• Homepage: no legal entity name, company address, licence claim or risk-disclosure text is visible in the page content.
• Registrar: the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration expiring 2027-09-30.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate is issued by YE1 (DV, domain-validated only) and valid to 2026-12-29. DV encryption confirms an encrypted connection, not the operator's identity.

What to Verify Next

Before any engagement, the first step is to establish whether the genuine Virtuals Protocol project operates this domain. That means checking the project's official channels, reached through an independently sourced route rather than any link on this site. Where operator or licensing claims are needed, the relevant financial or virtual-asset registry should be queried for a named legal entity, since the site names none. Anyone considering a transaction should also confirm independently whether the blacklisting has been cleared or reclassified before connecting a wallet. Official support and contact channels should be confirmed offline or through the project's verified presence. Evidence:

• Homepage: the site names no operator, so a registry search has nothing to anchor to until an entity is identified.
• External reputation: the blacklisting is current, so any later reclassification should be checked directly.
• Domain age: about 19 days since registration (2026-09-30) leaves no track record to rely on.

Summary Verdict

The overall posture is high-risk. The domain has been flagged by external threat sources and is new, and it offers a financial product with no identifiable operator or risk disclosure. Its encryption and clean behavioural testing show only that the page is technically well-formed. Nothing observed outweighs the confirmed adverse reputation, and the site is not suitable for sensitive or financial interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All four observed addresses are CDN edge servers, and the origin server was not observable. The infrastructure is mainstream and carries no reputation problems of its own. It is a mitigating factor only. Edge-only visibility also prevents independent verification of the hosting and can mask rapid content changes. Protective infrastructure does not offset the external threat detections or establish the site's legitimacy.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected, no transaction or message signed, and no funds, credentials or personal data supplied while the blacklisting stands. Anyone seeking the genuine Virtuals Protocol service should reach it only through an independently verified official channel.