Is crawlnets.network a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional site for the $CRAWL memecoin launched on pump.fun. It is branded "crawlnet" and presents itself as a network of automated "crawlers" pretraining a crypto-native language model. Visitors see a terminal-style live dashboard and prompts to connect a wallet, buy the token, spawn a crawler and claim payouts. Its apparent business model is a token-driven revenue-share scheme, in which participants are promised a portion of token creator fees in return for buying in.

Scam/Impersonation Risk

Confirmed contradictions are present, and the posture is explicitly cautionary. The domain is currently blacklisted by an external threat-intelligence source, and the sandboxed visit found strongly divergent behavior. After interaction, the homepage's content and layout changed substantially from what was first rendered, which is consistent with cloaking. No brand impersonation and no conflicting legal identities were observed. The risk is the offer itself and the evidence that it is hostile. The homepage claims that "crawler owners" split 40% of all fees every 12 hours, shows a "this round's pool" of 68.958 SOL (about 1.029 SOL per crawler), and displays a market capitalisation of roughly $3.0M beside a "+6120%" price figure. It also advertises 102 "crawlers awake", 17,265 pages, 42M dataset tokens, 421 domains and 745.41 SOL spent on compute, and promises that model "weights ship public". None of these figures is backed by an audit, model artifact, team identity or independent record. The payout pool is not tied to any verifiable activity, so the live counters read as unverifiable dashboard theater rather than product evidence. Participation requires paying first, by buying the token or spawning a crawler, with returns that depend on continued trading volume. That is the structure of a deposit-before-service, fee-share promotion in which later buyers fund earlier ones. Evidence:

• Homepage: promises owners 40% of creator fees every 12 hours and displays an unverifiable pool figure of 68.958 SOL.
• Homepage: presents unauditable activity counters and a "+6120%" price-performance figure, and its calls to action (connect, buy, spawn crawler, claim) all require a financial commitment.
• Sandboxed browsing of the homepage: page content changed markedly after interaction, and an external reputation source currently lists the domain.
• Domain registered 2026-10-04 via NICENIC INTERNATIONAL GROUP CO., LIMITED (~16 days old); 6 archive snapshots spanning 2026-10-05 to 2026-10-09 (about 1 year tracked), which shows no established history.

Regulatory Verification Notes

The site claims no license, regulator or registration number. It names no legal entity, team, address or contact channel, so there is nothing on-site to anchor accountability for an offer that functions as an investment-style return. Because the site solicits funds against promised payouts, this is a material content gap and not a minor transparency note. No third-party broker or regulatory-database match exists for the domain, so no reputational signal either supports or contradicts the on-site claims. The real-world operator remains independently unconnected to any identifiable person or company. Evidence:

• Homepage: no company name, license, jurisdiction or registration disclosure is published.
• Homepage: no contact channel is provided, and its only outbound link points to the token launch platform.
• TLS certificate issued by YE2 (DV, domain-validated only), valid to 2027-01-02. This confirms encrypted transport but says nothing about the operator's identity.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

No verification step can make the payout claims safe to rely on, so the checks below are for confirming or refuting them independently before any funds are committed. First, ask the promoters to name a legal entity and a regulator or registry through which a license can be checked. Second, check the on-chain token contract and the creator-fee distribution records directly on a public blockchain explorer, to see whether payouts of the claimed size and frequency have actually been made to holders. Third, ask for the model weights, dataset or training logs that would substantiate the crawler and compute claims. Fourth, confirm official communication channels through an independent route, not through links on the site. Evidence:

• Homepage: claimed 12-hour payout rounds and per-crawler amounts can be compared against on-chain records for the displayed contract.
• Homepage: the "weights ship public" promise and the dataset counts can be tested against any published artifacts, and none are currently offered.
• Homepage: no legal-entity or licensing details exist to check against a registry.

Summary Verdict

The assessment is critical and the posture is high-risk. External threat intelligence lists the domain, the page behaves evasively under interaction, and the commercial proposition is an unverifiable pay-to-participate return scheme on a very new domain. Valid encryption and mainstream hosting do not offset these findings. The site is not regarded as safe for any financial or credential-bearing interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers. The origin server was not observable, so the real hosting location cannot be independently confirmed. The protection is a mitigating factor only. It shows the operator used mainstream infrastructure, but it cannot offset the external listing or the behavioral findings, and it does not indicate that the content is legitimate.

Closing Assessment

Read-only viewing is the only proportionate use. Wallet connections, token purchases, crawler spawning, payout claims and any login or credential entry should be avoided.