Verdict
moltbook.com is low-trust and potentially risky.
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
| What this site appears to be | Moltbook is a public community feed and social network focused on AI agents where agents and humans post, discuss, and verify agent identities. The site shows trending agents, multiple discussion categories, and instructions for agent verification via external social proof. |
|---|
Evidence status and limitations
Evidence completeness: UNKNOWN
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0 reportsAbuseIPDB; shared hosting inflates this count | Noted |
| Domain age | 8 months oldMost scam domains are under a year old | Watch |
| Web archive | Archived since 2011207 snapshots | Clear |
| Certificate | Encrypted connectionIssued by Amazon RSA 2048 M01 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2011.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
Moltbook is a public community feed and social network for AI agents and humans, presenting agent discussions, trending profiles, multiple community categories, and an external-social-proof process for verifying agent ownership.
Scam/Impersonation Risk
The site’s apparent community-focused purpose and the absence of detected brand impersonation, phishing forms, or wallet-draining behavior do not resolve the principal risk signal: external security detections are present, including two malicious classifications, one suspicious classification, and confirmed blacklist status. No conflicting legal-entity names were observed, so the contradiction is reputational rather than an identity contradiction. The historical record also conflicts with the current registration record; archival continuity predates the current WHOIS registration, so the site’s provenance should not be treated as conclusive evidence of legitimacy.
- The homepage presents an AI-agent social network with public posts, agent profiles, trending content, and an ownership-claim process using external social proof.
- External reputation assessment recorded 2 malicious detections, 1 suspicious detection, and confirmed blacklist status; a separate major safe-browsing assessment was negative.
- WHOIS records creation on 2026-01-27 and an age of approximately 0.63 years, while archival records show 207 snapshots from 2011-02-02 through 2026-09-12 across 16 tracked years.
Regulatory Verification Notes
The available evidence supports only a likely connection to an online brand or project, not independently verified operator identity. The Terms of Service and Privacy Policy are available, but the reviewed material does not establish a regulated entity, licensing authority, or license number; this is a regulatory-transparency gap rather than, by itself, proof of fraud. The site’s business model is a community and user-generated-content platform, and no regulated financial-service claim is evidenced. Transport security is technically present, but a domain-validated certificate authenticates control of the domain rather than the legal identity of its operator.
- The homepage links to Terms of Service, Privacy Policy, an owners’ login route, and an agent-claim or verification workflow; no license number or licensing authority is identified in the supplied page evidence.
- The domain registrar is DREAMHOST, and the recorded registrant organization is Proxy Protection LLC.
- TLS uses the Amazon RSA 2048 M01 issuer with DV validation and is valid through 2027-03-18.
What to Verify Next
Before any account, credential, administrative, or financially consequential interaction, an enterprise should independently confirm the operator named in the legal documents through a separate trusted channel and determine whether the service is intended to operate without regulated financial permissions. Security teams should also validate the external blacklist findings against current internal reputation controls and preserve evidence of any change in status. Use should remain limited to passive public-content review until those checks are resolved.
- The homepage provides a public-observation mode for humans and a separate workflow for agent claims, while the analyzed page did not present a conventional login form or wallet-connection flow.
- The site exposes Terms of Service and Privacy Policy pages that can be checked for a legal entity, governing jurisdiction, and responsibility for the verification process.
- The available reputation evidence includes confirmed blacklist status and multiple malicious or suspicious detections, making independent security-status confirmation material to the decision.
Summary Verdict
The overall posture is low trust with sensitive-interaction risk. The site appears to provide a coherent community service, but the available evidence contains a material external-reputation contradiction that outweighs the benign presentation and limits confidence in safe engagement.
Infrastructure Integrity
The site is served from Amazon infrastructure in the United States, with the hosting network identified as AS16509. This provides an identifiable and mainstream hosting environment, but hosting-provider attribution is only a mitigating technical fact and does not establish operator legitimacy.
- Hosted on AS16509, identified as AMAZON-02 – Amazon.com, Inc., US.
- The observed server IP is 3.164.68.17 in the United States.
Closing Assessment
Restrict activity to passive viewing unless independent operator, legal-status, and security-reputation checks produce satisfactory results; sensitive access, credential submission, and financial interaction should not proceed on the present evidence.
Written analysis generated 2026-09-15 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
1 finding contributed to this verdict, raised by analysis engine.
01 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor.Analysis engine
signal:direct_threat
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of moltbook.com.
- The request stayed on moltbook.com. It was not redirected to another domain. Clear
- Registration is published under DREAMHOST. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-01-27. Noted
- The earliest public archive of this site is from 2011-02-02. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | DREAMHOST |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2600:9000:215d:8800:1f:ab2a:2480:93a1 |
| Name servers | ALBERT.NS.CLOUDFLARE.COM, ANGELA.NS.CLOUDFLARE.COM |
| SSL issuer | Amazon RSA 2048 M01 |
| SSL expiry | 2027-03-18 |
| Domain age | 0.63 years (continuous registration) |
| Domain expiry | 2027-01-27 |
| Archive first seen | 2011-02-02 |
| Archive snapshots | 207 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about moltbook.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.