Is deepsnitch-ai.live a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at deepsnitch-ai.live presents itself as "Deep Snitch AI", a crypto-themed project. Its homepage is titled around a presale of a token ticker "$DSNT" and promotes AI agents marketed as a way to find on-chain crypto "alpha". Its apparent business model is raising funds from retail buyers through a pre-launch token sale, with an AI-analytics product used as the selling proposition.

Scam/Impersonation Risk

This is the decisive section of the assessment. Security vendors currently flag the domain, including a tier-one vendor, and the aggregate result is a confirmed blacklisting by external reputation sources. That is a hard contradiction, and no hosting or encryption signal offsets it. The site offers a token presale, a format commonly used for exit scams and pump-and-dump schemes. A domain that is both newly registered and externally flagged, and that solicits money for an unlaunched token, fits the typical profile of a fraudulent fundraising site. The evidence does not show a conflict between legal entity names, nor does it show impersonation of a specific third-party brand. The risk comes from the external threat detections together with the site's young age and fundraising purpose. In the sandbox the homepage made no external calls, requested no wallet connection, and showed no clipboard manipulation, hidden forms, or cloaking, so no malicious on-page behaviour was observed. Those are the baseline traits of a stable page, and they do not cancel the reputational findings. A page that appears clean in a sandbox can change once a purchase flow is switched on. Evidence:

• Homepage: the page is built around a "$DSNT" presale and "AI agents for on-chain crypto alpha", so the primary call to action is an investment-style token purchase.
• External reputation: 2 security engines rate the domain malicious and 3 rate it suspicious, with a tier-one vendor among those flagging it.
• Domain provenance: registered 2026-02-08 (~0.71 years old) through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration expiring 2027-02-08.
• Archive depth: only 2 archive snapshots, between 2026-09-17 and 2026-09-22 (1 year tracked), so the site has little established public history.

Regulatory Verification Notes

The material gives no indication that the operator holds any licence, registration, or regulatory authorisation for a public token sale, and no third-party regulatory source confirms one. The identity of the real-world operator could not be tied to any verifiable person or company. The legal and identity pages were not independently confirmed, so the site's own description of itself is unverified. No third-party broker or regulator-style reputation record matches this domain, so no outside body vouches for the project. The absence of a licence is a verification gap on its own, but it carries more weight here because the external threat detections are present. The valid encryption certificate shows only that traffic is encrypted, not who runs the site. Evidence:

• Homepage and legal disclosure: no regulatory authorisation or verifiable operating entity is evidenced for the token presale offering.
• Transport encryption: the TLS certificate is issued by YE1 at domain-validated (DV) level, valid to 2026-12-06. DV confirms only control of the domain.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party reputation: no broker or regulator-style reputation record matches the domain.

What to Verify Next

Any contact with this project should begin with independent confirmation of who is behind it. That means locating a named legal entity and checking it against the securities or financial-promotion regulator in its claimed jurisdiction, because a token presale directed at the public is often a regulated activity. The token's existence, contract, and team should be traced through channels not linked from the site, such as established exchanges and long-standing project records. Official contact and social channels should be confirmed by an offline or otherwise independent route, not through links on the site. The domain's external threat listing should be re-checked from time to time, and any change in its status should be documented before the domain is treated as safe. Evidence:

• Homepage: the presale and AI-agent claims cannot be treated as accurate until a named, regulated issuer and a published token contract are independently confirmed.
• Domain history: registration in early 2026 and a thin archive record mean no long track record exists to lean on.
• External detections: the current threat listings are the benchmark for any later re-assessment.

Summary Verdict

The site is assessed as high risk. It is a young, externally blacklisted domain that solicits money through a token presale, and its operator cannot be independently identified. Its clean sandbox behaviour and valid encryption do not outweigh the confirmed reputational contradictions.

Infrastructure Integrity

The site is served through Cloudflare's CDN and web application firewall, and every observed address belongs to Cloudflare edge servers. The origin server was not observable, so independent verification of the real hosting is not possible. This protection is a mitigating factor only. It improves availability and filters hostile traffic, but it can also let site content be swapped quickly without any visible change in hosting. It does not offset the external threat detections or establish legitimacy.

Closing Assessment

The site should be treated as read-only content at most. Wallets should not be connected, credentials should not be entered, and no funds or tokens should be sent to any address it publishes. Anyone who has already interacted with it should review wallet permissions and account security.