Is deepsnitchs-ai.claims a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page promotional presence for a crypto-asset project branded "DeepSnitch AI" with a "$DSNT" token. Its homepage is titled as a token presale offering "AI agents for on-chain crypto alpha". It presents itself to visitors as an AI-driven crypto intelligence product funded through a pre-launch token sale, so its apparent business model is raising money from retail crypto participants ahead of any live product.

Scam/Impersonation Risk

This is the decisive area of the assessment. The domain is currently blacklisted by external threat-intelligence sources. Multiple independent security engines classify it as malicious, and a smaller group rates it suspicious. The detections include several tier-one vendors, and the volume of malicious verdicts alone is enough to override every positive technical signal. The detections do not say what the site does. Aggregated reputation data can reflect phishing, fraud or malware-distribution classifications, and the attribution is unspecified. No separate brand impersonation or conflicting legal-entity names were confirmed. The page is also a presale-style solicitation. Token presales are a common vehicle for advance-fee and exit-style crypto fraud, because buyers pay before any verifiable product, audit or redemption mechanism exists. The homepage title uses that framing, and the very recent registration lets the domain trade on a branded project name with no track record behind it. Behavioural sandboxing showed stable page delivery, no external data posts, no wallet-drainer or clipboard-hijack activity and no cloaking. That means the harm is not demonstrated in the page's runtime behaviour. It does not offset the external blacklisting. Evidence:

• Homepage: titled as a "$DSNT" token presale for AI on-chain crypto agents, which makes it a funds-solicitation page.
• External reputation: several major security vendors flag the domain as malicious (10 malicious and 5 suspicious verdicts), and the domain appears on at least one independent blacklist.
• Domain provenance: registered 2026-04-05 (~0.56 years old), so the domain is under a year old.
• Web archive: only 3 snapshots, spanning 2026-08-10 to 2026-09-22 (1 year tracked), so there is no established history.

Regulatory Verification Notes

The material reviewed identifies no operating company, legal entity, licence, registration number or regulator for the project. The real-world operator cannot be connected to any verifiable person or organisation, and the page's own claims are not proof of identity. Registration details are incomplete, which adds to ownership opacity. For a site that takes money for a crypto token, an absent regulated-entity trail is a significant verification gap, though the gap alone does not prove misconduct. No third-party broker or regulator listing was matched, and none is implied. The registrar is NICENIC International Group Co., Limited, a commercial registrar, so the registration channel is ordinary. Evidence:

• Homepage: no named legal entity, licence, registry reference or regulator is identified in the captured content.
• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED; registered 2026-04-05, expiring 2027-04-05.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (DV), valid to 2026-12-31 (64 days remaining). DV validation confirms control of the domain only, not the identity of the operator.

What to Verify Next

Any contact with the project should start with independent corroboration of the project's existence. This means checking for a registered legal entity in the claimed jurisdiction, and for a regulatory authorisation covering the token offering where applicable. It also means finding a published smart-contract address that can be inspected on a public block explorer, with a third-party audit and clear tokenomics. Official contact channels and social accounts should be confirmed offline or through sources outside the site, not by following links on the page. Any presale payment address should be compared with independently published project information before a transfer is considered. Because of the active blacklisting, the site should be re-checked against fresh reputation data before any engagement. Evidence:

• Homepage: a presale offering is presented without verifiable entity or audit references in the captured content.
• External reputation: the current blacklisting is the primary reason to treat the site as unsafe until it is cleared.
• Provenance: the domain is under a year old and has only a thin archive record, so the site's existence cannot be confirmed from history.

Summary Verdict

The overall posture is high-risk. Active external blacklisting, a young and thinly documented domain, and an unidentified operator soliciting funds through a token presale converge on a clearly cautionary classification. The valid certificate and clean runtime behaviour do not change this outcome.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node, so the origin server is not visible. Mainstream, reputable infrastructure is a mitigating factor only. It does not indicate legitimacy, and the edge-only visibility limits independent hosting verification and can mask rapid content changes. The hosting provider has no abuse history of its own in this data, so it plays no role in the risk conclusion.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, token purchase or any other financial interaction. At most, read-only viewing from an isolated, non-sensitive environment is appropriate until the blacklisting is lifted and the operator can be independently identified.