Is clawnch-bot.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Clawnch (clawnch-bot.com) is a single-page website titled "clawnch - token infrastructure for agents". It presents itself as a crypto-token tooling brand aimed at automated agents or bots. The homepage carries only a short block of text, so the apparent purpose is to promote a token-related service or product. The captured pages show no detailed product documentation, team information, or corporate profile.

Scam/Impersonation Risk

The evidence converges on an elevated risk of fraud or abuse. Several independent external reputation sources currently flag the domain as malicious or suspicious, and a tier-one security vendor is among those flagging it. This amounts to a confirmed blacklisting. It is the decisive factor in the assessment, and nothing else observed offsets it. The domain was registered only weeks ago, and its web-archive footprint is correspondingly thin. A brand-new domain in the token and crypto space that is already carrying blacklist hits fits the pattern of short-lived campaigns, which tend to stand up a domain quickly and abandon it once it is reported. The domain's DNS profile is also consistent with a young domain that has few subdomains. No conflicting legal identities and no explicit brand impersonation were observed. The risk therefore rests on the reputation hits and the domain's youth, not on any identity contradiction. In sandbox testing the page behaved quietly. It made no external requests and showed no wallet-drainer, clipboard-hijack, hidden-form, or cloaking behaviour. This lowers the likelihood of an active exploit on the page as captured, but it does not offset the external detections, and content can be swapped in later without notice. Evidence:

• Homepage and domain-level reputation: multiple external detections, including a tier-one vendor, mark the domain as malicious or suspicious, and a blacklist hit is confirmed.
• Domain registered 2026-09-11 (~0.11 years, about 40 days old).
• Web archive holds 5 snapshots spanning 2026-09-11 to 2026-09-22 (1 year tracked), which shows only a brief history.
• Homepage behavioural testing: 3 of 3 runs completed, with zero external network calls and no wallet-interaction or drainer activity.

Regulatory Verification Notes

The homepage, the only page captured, discloses no operating company, licence, registration number, or named individuals. Those omissions are expected for a service in this niche. Ownership is also opaque: the domain registration does not expose a complete owner record. That is an administrative limitation, not an identity contradiction. No third-party broker or regulatory-database entry was matched, so no external reputational signal on licensing is available either way. These gaps matter more here than they would on an established site, because the risk is already elevated for other reasons. The domain also has no established operating history that could stand in for formal disclosure. Evidence:

• Homepage: no company name, licence, registration number, or legal or terms pages were identified in the captured content.
• Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED; registration runs from 2026-09-11 to 2027-09-11.
• Hosted on AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by YE2 (DV, domain validation only), valid to 2026-12-10. Domain-validated certificates confirm control of the domain, not the operator's identity.

What to Verify Next

Before any engagement, an independent route should confirm whether a real, identifiable organisation operates this brand. That means checking the project's official channels through sources not linked from this site, such as established exchange listings, a verified social presence, or a published code repository. Any claimed token or contract address should be cross-checked on an independent blockchain explorer and a recognised token-listing source, and not accepted from the homepage. If a company or licence is claimed, it should be confirmed directly with the relevant registry. The site's official support and contact channels should be confirmed through an independent route as well. Re-checking the domain's external reputation status after some time would show whether the detections have been cleared or have grown. Evidence:

• Homepage: the brand positioning as token infrastructure for agents is not backed by a visible team, documentation, or product detail.
• The domain's age and archive depth are too limited to demonstrate a track record.
• No third-party broker or registry match is available to corroborate the brand.

Summary Verdict

The available evidence supports a critical-risk, clearly cautionary posture. Confirmed external blacklisting on a very recently created domain is the decisive factor, and the site's technically tidy behaviour and valid certificate do not offset it. The site's real-world operator remains unidentified, and no evidence of legitimacy is strong enough to counter the reputation findings.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF, and all four observed addresses are edge nodes. The origin server was not observable, so independent verification of the actual hosting is not possible. This arrangement can mask rapid content or backend changes. It is a mitigating factor only, since Cloudflare fronts legitimate and abusive sites alike. The infrastructure also shows heuristic signs of a freshly created domain with few subdomains, which the other evidence supports but which is not independently confirmed.

Closing Assessment

Read-only viewing is the only proportionate use of this site at present. Login, credential entry, wallet connection, token purchases, and any financial interaction should be avoided. Nothing should be downloaded from the site until its external reputation status is resolved and an independently confirmed operator emerges.