Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
linera.icu shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Linera Presale is a single-page cryptocurrency token-sale website on a recently registered .icu domain. Its page title invites visitors to buy "$LNRA" in a "Community Round". It appears to be a pre-launch fundraising funnel that markets a token allocation to retail participants and gives the visitor a purchase path before any established product or listing exists.
Scam/Impersonation Risk
This is the dominant concern. Independent reputation checks currently flag the domain as malicious or suspicious, and it is treated as blacklisted by external threat sources, which is a decisive negative. The signals converge. The domain was registered only weeks ago, which is a typical pattern for disposable presale and token-sale fronts. The domain's name closely resembles an established blockchain project, a common lure in presale fraud. The domain also sits on a rarely used, low-cost top-level domain, and it presents an unverifiable "community round" token-purchase pitch. The registrant is listed only by a single given name with no organization. The sandbox did not observe wallet-connection prompts, wallet-drainer behavior, clipboard tampering, hidden forms or credential posts to external hosts, so no active drainer mechanism was confirmed. These clean behavioral results do not offset the threat-intelligence listings. The site also generated a high volume of third-party network traffic, mostly to external destinations, along with repeated front-end console errors. No conflicting legal identities were found, and no contact email anomaly was observed. Evidence:
- Homepage title promotes a token presale ("Buy $LNRA in the Community Round"), the core fundraising claim.
- Domain registered 2026-09-02 (~0.14 years, about 52 days old) through PDR Ltd. d/b/a PublicDomainRegistry.com, listing the registrant as "John" with no organization.
- Behavioral sandbox, 3 successful runs: 27 external XHR/fetch calls and 9 external POSTs, about 98% of activity directed externally, 9 console errors. No requests reached non-whitelisted destinations, and no wallet, clipboard or hidden-form abuse was detected.
- External threat intelligence returned 2 malicious and 2 suspicious detections, and the domain is on an external blacklist.
Regulatory Verification Notes
The site is a token sale aimed at retail buyers, an activity that normally falls under securities, commodities or crypto-asset regimes. The evidence shows no licensing or registration status, and the on-page disclosure position is unclear. Real-world operator identity is not independently verified, so neither the project nor the sellers can be tied to an accountable legal entity. This is a verification and transparency gap that raises the stakes of the threat listings. It is not a finding on its own. No third-party broker or regulator database entry matched this domain, so there is no external regulatory standing to rely on either way. The valid but entry-level transport certificate shows that the connection is encrypted. It says nothing about the operator's legitimacy. Evidence:
- Homepage and observable page content name no legal entity, license or registration number for the token sale.
- Served from AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1, domain-validated (DV) only, valid to 2026-12-01.
- No broker or regulatory-database match was found for this domain.
What to Verify Next
Any independent confirmation of the project must start outside this site. First, check the official Linera project channels and announcements, reached from a source other than this domain, to learn whether any presale exists and which domain it uses. Second, search the securities and crypto-asset registers of the relevant jurisdictions for any authorization covering a public token sale. Third, confirm the official support and contact channels through an independent route, not through links on this page. Fourth, if funds or wallet access were already shared with the site, report the domain to the project team and the relevant fraud or cybercrime authority. Evidence:
- The domain name closely resembles an established blockchain project, so the official domain must be established independently.
- The homepage invites participation in a presale with no verifiable issuer.
- The domain's registration is only weeks old, so no long operating record exists to check.
Summary Verdict
The site presents a high-risk posture. A fresh domain, a presale pitch with no accountable operator, and active reputation listings from external threat sources point in the same direction. The strong technical hygiene and absence of observed wallet abuse do not change this assessment.
Infrastructure Integrity
The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge addresses. The origin server was not observable. Bot-challenge protection was active during capture. Valid encryption and a mainstream provider are mitigating factors only. They cannot offset the reputation risk, and edge-only visibility can conceal rapid content changes behind a stable front end. Heuristics flag a young domain with sparse subdomains, but these are unconfirmed and carry little weight.
Closing Assessment
The site should be treated as unsafe for sign-in, wallet connection, token purchase or any payment until the project's own official channels confirm it. Casual viewing without interaction is the only low-risk use. Anyone who has already interacted with the site should move funds, revoke wallet permissions and change any reused passwords.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - Many of the responses the page received looked generated rather than served normally.Behaviour in a sandbox
rule:BEHAV_SYNTHETIC_RESPONSES_HIGH
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of linera.icu.
- The request stayed on linera.icu. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-02. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::ac43:c969 |
| Name servers | BRADEN.NS.CLOUDFLARE.COM, PAT.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-01 |
| Domain age | 0.14 years (continuous registration) |
| Domain expiry | 2027-09-02 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about linera.icu at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.