Is divergents.live safe? TrustSniffer's low-trust assessment: 40/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at divergents.live is an unclassified, recently established web property whose actual content could not be observed. The only material served to automated capture was a protective interstitial warning page titled as a suspected-phishing notice, so no products, services, company description, or business model could be confirmed. Its apparent purpose is therefore undetermined, and the assessment rests on its technical footprint, reputation, and runtime behaviour.

Scam/Impersonation Risk

This is the decisive section. The domain is currently blacklisted by external threat-intelligence sources. Several independent security engines flag it as malicious, and one of them is a leading tier-one vendor. During capture, the site's edge-protection layer withheld the real homepage and returned a warning interstitial in its place. That interstitial is consistent with the external detections and is a significant adverse indicator. No brand impersonation or conflicting legal identities were observed, so the risk rests on reputation and behaviour rather than on identity claims. The site's runtime behaviour adds supporting concern. The page generated an unusually large volume of third-party requests, including outbound POST submissions, and its page structure changed heavily after interaction. It also logged repeated script errors. No wallet-connection prompts, clipboard manipulation, hidden forms, or credential posts to external hosts were detected, and the outbound traffic went to recognised destinations. These behaviours do not prove malice. They do not offset the external detections either. The domain's history is also short and uneven. The current registration record is only a few weeks old, while archive captures reach back further. That pattern is consistent with a lapsed domain being re-registered, but it does not establish this. Evidence:

• Homepage capture: the site served a bot-challenge response (HTTP 403) with a page titled as a suspected-phishing warning, and no genuine site content was retrievable.
• External reputation: four security engines flag the domain as malicious, including one tier-one vendor, and a confirmed blacklist hit is present.
• Domain registered 2026-09-09 (~0.12 years, about 6 weeks old); the web archive holds 10 snapshots spanning 2025-03-29 to 2026-09-17 (2 years tracked).
• Runtime behaviour on the homepage: 130 external XHR/fetch requests, 9 external POSTs, 22 console errors, and a peak of 1,523 DOM mutations after interaction.

Regulatory Verification Notes

Nothing on the captured material identifies a legal entity, licence, regulator, or registration number, and the on-page disclosure position cannot be established. The domain registration record also does not reveal an identifiable owner, which leaves ownership opaque. This is an administrative limitation in itself. Together with the adverse reputation above, it means there is no independent basis for treating the operator as a regulated or accountable counterparty. The site's real-world identity is not verified, and nothing here should be read as evidence of legitimacy. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED; registration expires 2027-09-09, and owner details are hidden or incomplete.
• Served from AS13335 (Cloudflare, Inc., US).
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-08 with 47 days remaining; this confirms encryption, not operator identity.

What to Verify Next

Verification should be carried out outside the site and its channels. First, any claimed identity, licence, or regulator registration should be checked directly on the relevant official registry before any engagement. Second, any official contact channel should be confirmed through an independent route and not through links or details supplied by the site. Third, the domain's reputation status should be re-checked later. This is the only route by which the current adverse listings could be cleared or confirmed as stale. If the site is claimed to represent a known brand, that brand's own verified channels should be asked whether the domain belongs to it. Evidence:

• Homepage: no operator, licence, or registration claim could be extracted to test against a registry.
• Reputation listings are current as of the latest analysis, with the most recent archive capture dated 2026-09-17.

Summary Verdict

The site sits in an elevated-risk posture. Active adverse reputation findings, an unverified operator, and a very young registration outweigh the site's technically sound transport setup and the absence of overt credential-harvesting behaviour. Available evidence does not support treating it as a trustworthy destination.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the true origin host is not visible. This protection is a mitigating factor only. It prevents independent verification of where the content is hosted and cannot offset the external threat detections. A valid certificate and a recognised network provider reflect sound baseline hygiene, not trustworthiness.

Closing Assessment

Treat the site as unsafe for any sensitive interaction. Do not log in, enter credentials, connect a wallet, download files, or make payments or deposits. Any contact should be limited to passive viewing from a protected environment until independent verification is completed and the external listings are cleared.