Is maxilaunch.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

MaxiDoge presents itself as a single-page token-claim landing site. It tells visitors that a presale for the $MAXI token is finished and that their allocation is waiting. The page's central call to action is to connect a crypto wallet and claim the tokens. Its apparent business model is converting presale participants into wallet-connection and gas-paying transactions on the Ethereum network, with no visible project team or corporate operator behind it.

Scam/Impersonation Risk

This site carries an elevated risk of financial harm, and the contradictory signals are confirmed rather than inferred. The domain is blacklisted by external threat-intelligence sources. A substantial number of security engines classify it as malicious, including several tier-one vendors. A further group of engines marks it suspicious. No impersonation of a specific third-party brand and no conflicting legal identities were detected. The risk instead arises from the combination of that external condemnation and the page's own claims. The homepage asserts "$4M+ raised" from "4,200+ presalers" and says the "presale is complete". It offers "No Deadline — Claim Anytime" alongside urgency messaging ("Claim Live", "Live Now", "Claim Your $MAXI Tokens Now"). It describes a 50% at token generation and 50% over six months vesting schedule. It tells visitors to hold ETH for gas and supports MetaMask and WalletConnect. The claimable balance shows only a placeholder until a wallet is connected. This is the standard shape of a wallet-drainer or fake-claim funnel: a flattering "you believed from the start" message, a verifiable-sounding but unproven fundraising total, and an on-chain approval request that can expose the visitor's wallet. The page names no team, no auditor and no use of funds, so the headline figures cannot be checked. Its Whitepaper, Audit, Terms and Privacy labels appear only as footer text, with no verifiable substance behind them. Abuse reports exist against an address belonging to a shared provider range. They are attributed to shared infrastructure and discounted, so they are not counted against this site. The conclusion rests on the direct threat detections and the page's own content. Evidence:

• The homepage's wallet-claim flow combines a wallet-connection prompt, a gas-fee requirement and a high-pressure call to action, which together form a sensitive financial interaction.
• External reputation checks flagged the domain as malicious by 13 engines and suspicious by 3, including three tier-one vendors, and a critical-severity kill switch fired on that count.
• The homepage's "$4M+ raised", "4,200+ presalers" and "No Deadline" claims come with no named team, no legal entity and no verifiable audit.
• Registered in 2026 (about 10 days old), with 1 archive snapshot (2026, 1 year tracked), consistent with a newly launched claim page rather than an established project.

Regulatory Verification Notes

The site claims no licence, registration or regulatory authority, and no third-party regulatory source confirms one. For a page asking visitors to transact value in a token presale, the homepage discloses no operating company, jurisdiction, responsible individuals or physical address. It also gives no accountable support channel and no accounting of the funds supposedly raised. These are significant governance and disclosure gaps for a financial interaction, and they sit alongside the external threat detections. Ownership of the domain is not attributed to any identifiable entity, so the operator's real-world identity remains unverified. No broker-reputation dataset matched this site, so no third-party reputational signal exists either way. Nothing on the site supports treating the project as regulated, audited or legally constituted. Evidence:

• The homepage footer carries only a generic "All rights reserved" notice, with no company name, registration number or licence reference.
• The homepage's Terms, Privacy and Audit labels give no verifiable counterpart, such as an auditor identity or report.
• Served from AS16509 (AMAZON-02, US), with a TLS certificate issued by YR1 (DV) valid to 2026-12-16. A domain-validated certificate confirms only domain control, not operator identity.

What to Verify Next

Any claim that a $MAXI presale occurred should be checked independently of this site. A prospective participant should find the project's official channels through an offline route or an established exchange or aggregator listing, not through links on this page. They should confirm the token contract address and the claim mechanism with an independent on-chain explorer. They should confirm the existence of any audit directly with the named audit firm. Wallet approvals and signatures should be inspected in a transaction-simulation tool, and any wallet that has already interacted with the site should be reviewed. Official support and contact channels should also be confirmed independently. Evidence:

• The homepage's "Connect wallet to verify your presale contribution" instruction cannot be tested without exposing the wallet, so the allocation claim needs off-site verification.
• The homepage's "Audit" and "Whitepaper" labels are not matched by named, checkable documents.
• The vesting terms (half at token generation, half over six months) appear only on this page and have no independent confirmation.

Summary Verdict

Available evidence places this site firmly in a high-risk, cautionary category. Confirmed external threat detections, a very recent registration and a wallet-claim funnel with unverifiable financial claims converge on the same conclusion. Technical hygiene such as a valid certificate does not offset that conclusion. The real-world operator remains unidentified.

Infrastructure Integrity

The site is fronted by a CDN/WAF layer (Cloudflare), and the only observed addresses are edge IPs within AWS's network, so the origin host cannot be independently identified. This protective layer is a mitigating factor only. It can obscure rapid content changes and provides no assurance about the operator or intent. It cannot offset the external threat detections.

Closing Assessment

The site should not be used for login, wallet connection, signing or any financial action. Visitors should limit interaction to passive viewing at most. Anyone who has already connected a wallet or signed a transaction here should revoke token approvals promptly and move assets to a fresh wallet.

Signals weighed against the site

• AbuseIPDB: 61 reports on hosting IP 216.198.79.65 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.