Is crawinets.network a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

$CRAWL is a single-page cryptocurrency memecoin site presented as "crawlnet", which claims to be pretraining "the first crypto-native LLM from scratch" using fleets of headless crawlers that read crypto whitepapers, documentation, governance forums and code. To a visitor it shows a live-style terminal dashboard with a wallet-connect prompt, a "buy $CRAWL" button that redirects to the pump.fun launch platform, and a "spawn crawler" function that sells paid crawler slots. Its apparent business model is selling the token and the crawler slots, with buyers promised a share of the token's creator fees.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is clearly cautionary. The domain appears on an external blacklist, and a tier-one security vendor flags it. The type of detection is not specified, so the evidence does not establish phishing or brand impersonation. No brand impersonation was detected, and no conflicting legal identities appear because the site names none. The domain spelling does differ from the "crawlnet" brand shown on the page. The homepage promises that crawler owners split "40% of all fees" every 12 hours, with a displayed round pool of 68.958 SOL, or about 1.029 SOL per crawler. Prospective participants must first buy the token or pay to spawn a crawler, so money is committed before any service or return is delivered. This is the deposit-before-service pattern. The supporting claims are unverifiable on the page: 102 "crawlers awake", 17,265 pages read, 42M dataset tokens, 745.41 SOL spent on compute, a $3.0M market cap and a "+6120%" price change. These figures read as marketing counters rather than audited data. They are paired with a promise of an AI model whose weights "ship public", which is a claim of future delivery with nothing shown to back it. Automated browser testing also found strong cloaking: after interaction the page's text and layout changed substantially from its initial state, with very heavy dynamic DOM rewriting and well over a hundred console errors. Together these point to a page that shows different content to different visitors or at different moments, which undermines any reliance on what the homepage displays. The wallet-connect prompt and the redirect to the token-sale platform make the page a direct financial-interaction surface. Evidence:

• Homepage: states the 40%-every-12-hours fee-share, the per-crawler payout figure and the pool total, with no mechanism, audit or fee-routing address.
• Homepage: shows the headline counters (crawlers, pages, dataset tokens, compute spend, market cap, percentage gain) with no independent source.
• Behavioural testing of the homepage: content changed markedly after interaction, which is consistent with cloaking.
• Domain registered 2026 (~15 days old); the web archive holds only 3 snapshots, spanning 2026-10-04 to 2026-10-09 (1 year tracked), consistent with a newly launched property.

Regulatory Verification Notes

The site claims no license, regulator, registration number or legal entity, and it names no team, operator, auditor or physical address. This is a verification and transparency gap in a context where the visitor is asked to commit funds. Ownership and governance opacity are present. Identity could not be independently linked to any real-world person or organisation, and the homepage offers no contact route. The gap is not by itself evidence of fraud, but it removes the usual accountability that would apply to a product with return-sharing features. No third-party broker or regulatory-database match was found, so there is neither a reputational endorsement nor a regulatory record to rely on. Evidence:

• Homepage: no legal entity, team, audit report, contact channel or license reference appears anywhere on the page.
• Domain registered through NICENIC International Group Co., Limited on 2026-10-04, with expiry on 2027-10-04 (a one-year term).
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by YE2 (DV, domain validation only), valid to 2027-01-02. This confirms encryption, not operator identity.

What to Verify Next

Any claim about fee distribution should be checked on a public blockchain explorer rather than on the site. That means inspecting the token's contract address, the creator-fee wallet and its actual payouts, and whether the 40% split to crawler owners has ever occurred. The team or operator should be identified through channels independent of the site, such as established news coverage or official profiles that the site does not control. A claimed license or registration should be checked with the relevant financial regulator's own registry. Official support channels should be confirmed by an independent route before any communication or payment. Evidence:

• Homepage: shows the token's contract address, which can be looked up on an independent explorer.
• Homepage "how it works" section: describes the fee-split and spawn mechanics that on-chain history can confirm or refute.
• Homepage: the buy and spawn buttons lead to a third-party token platform, whose records should be checked directly rather than through the site.

Summary Verdict

The available evidence supports a high-risk assessment. Confirmed external blacklist detections, evasive page behaviour and a payment-first financial offer converge on the same conclusion. Superficial technical hygiene does not offset them, and the operator cannot be tied to any accountable identity.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed address is a Cloudflare edge address, so the origin server is not observable. This offers protection against some attacks and a valid TLS certificate is in place. It is only a mitigating factor, because edge-only visibility prevents independent verification of the true host and can mask rapid content swaps. It does not offset the reputational and behavioural risks above.

Closing Assessment

The site should not be used for any financial interaction. That includes connecting a wallet, buying the token, paying to spawn a crawler or claiming earnings. Viewing the page without interacting is the only reasonable use, and any funds already committed should be treated as at risk.