Is odei.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

ODEI is a wallet-gated registration page for a "personal AI governance layer" that presents itself as an AI software platform. A visitor is asked to connect a compatible Web3 wallet holding the $ODAI token on the Base network, or to sign in through Privy or WalletConnect, in order to create an operator session. A USD/EUR card subscription path is shown but paused and replaced by an email waitlist. The apparent business model is paid software access in which the token acts as an access key rather than a yield product, though the site gives no verifiable operator behind it.

Scam/Impersonation Risk

Contradictory signals are present and sharply raise the risk. The domain is currently blacklisted: several independent security engines flag it as malicious, and a separate external blacklist corroborates this. Infrastructure protections cannot offset it. No brand impersonation, conflicting legal identities or credential-harvesting form were observed. The risk therefore comes from the reputation findings combined with the site's own mechanics. The only functional interaction is a prompt to connect a wallet and sign in to prove token holdings, and the sandbox saw outbound traffic dominated by third-party destinations, including several data submissions to destinations outside the recognised set. A wallet-connect flow on a blacklisted domain carries a real risk of malicious signing requests, so it should be treated as unsafe for any financial or credential interaction. The domain is also very young. Archive captures from 2004 to 2018 predate the current registration, so they show only that the name existed under earlier ownership. They do not give the present operator a track record, and the new registration is treated as a reason for caution. Evidence:

• Homepage registration flow: access is conditional on connecting a wallet that holds $ODAI on Base, with Privy and WalletConnect sign-in options and a "Connect Any Wallet" prompt.
• Homepage network behaviour: three of eight observed external data submissions went to destinations outside the recognised set, and external requests dominated page traffic.
• Domain registration: registered April 2026 (~0.5 years old) through NICENIC International Group Co., Limited, with expiry in April 2027.
• Web archive: 38 snapshots spanning 2004–2018 (15 years tracked), with the last capture years before the current registration.

Regulatory Verification Notes

The page presents no legal entity, registered address, licence or registration number, and no audit or smart-contract reference for $ODAI. The institutional-scale framing of the "governance layer" is not backed by any verifiable claim in the visible text. Operator ownership is not independently established. The deterministic assessment treats this as a governance weakness, and the identity of whoever runs the platform remains unconfirmed. The site does not claim a financial licence, so no false licensing claim was found. The absence of a licence is a transparency gap in itself, and it is more material here because wallet-linked profiles, with name, role and contact details, are to be stored in a "cloud profile". No third-party broker reputation record was matched, so there is no external regulatory signal to weigh either way. Evidence:

• Homepage: no named company, jurisdiction, physical address or licence reference is shown beside the wallet and subscription prompts.
• Homepage onboarding text: describes a browser session, a cloud profile storing name, role and contact identity, and a forthcoming desktop client, with no statement of who holds or processes that data.
• Transport layer: served from AS13335 (Cloudflare, Inc., US), with a valid domain-validated TLS certificate issued by YE1 and valid to January 2027. This confirms encryption only, not operator identity.

What to Verify Next

Before any interaction, the operator's real-world identity should be established through independent channels, such as company registries in the jurisdiction the operator claims, and not through the site's own pages. The $ODAI token contract on Base should be checked on an independent block explorer for its issuer, holder distribution and any audit. The security-vendor detections should be re-checked directly with the vendors' public lookup services to see whether they have been cleared or are still active. Any official support or contact channel should be confirmed through an independent route, not through links on the page. Evidence:

• Homepage: the subscription path is labelled paused with only a waitlist email form, so no payment process can be assessed.
• Homepage legal, research and API documentation links: the content behind these should be compared against the claims on the registration page.
• Homepage telemetry consent banner: the data processing it covers should be read before any identifier is supplied.

Summary Verdict

The site sits in a clearly elevated risk posture. Current external threat detections are decisive, and nothing in the site's content or technical setup outweighs them. The operator is unverified and the domain's operating history is short, so there is no basis for treating the site as an established, legitimate service.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF, and every observed address belongs to Cloudflare edge servers, so the origin host is not visible. This does not point to wrongdoing and gives some protection against denial-of-service and network-level abuse. It also prevents independent verification of where the site is hosted and makes it easier to swap content quickly without detection. The infrastructure is a mitigating factor only and does not offset the reputation findings.

Closing Assessment

The site should be treated as unsafe for any login, wallet connection, credential entry or financial action. Viewing the page from an isolated browser without a connected wallet is the only proportionate use. Nothing should be signed, and no email address or personal data should be supplied, until the external detections are cleared and the operator is independently verified.