Is pinothedino.info a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page token-promotion site on the pinothedino.info domain. Its homepage is titled "PINO Allocation Live — Claim Your $PINO Tokens". It presents itself as a live allocation event in which visitors are invited to claim a cryptocurrency token called $PINO. The apparent purpose is to drive visitors toward a token claim or distribution action.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, including at least one tier-one security vendor, and the combined detections amount to a confirmed blacklist listing. No conflicting legal identities or brand-impersonation evidence were observed, and the structured evidence does not confirm phishing. The blacklist hit is nonetheless decisive. The homepage framing of an "allocation live" event with an invitation to "claim" tokens follows a pattern widely used in token-giveaway and claim-lure campaigns. These campaigns typically steer visitors to connect wallets or approve transactions. The sandbox did not observe wallet prompts, so this concern rests on the lure format and the external detections, not on observed drainer behaviour. The domain was registered only a few months before the assessment, and its web-archive presence is minimal. That is consistent with a freshly stood-up campaign domain and gives no track record to offset the detections. The sandbox runs were otherwise quiet: no third-party network calls, no hidden or external-posting forms, no clipboard manipulation, no cloaking, and no console errors. Absence of overt on-page malicious behaviour does not neutralise the external listings, because content can be swapped quickly on a young domain. Evidence:

• Homepage: the title promises a live token allocation and invites visitors to claim $PINO tokens.
• External reputation: multiple engines classify the domain as malicious or suspicious, and a tier-one vendor is among them.
• Domain provenance: registered 2026-07-24 (~0.26 years old, about three months).
• Web-archive depth: 1 archive snapshot, captured 2026-07-28 (1 year tracked), so there is effectively no historical continuity.

Regulatory Verification Notes

The captured page offers no verifiable operator identity, corporate registration, or licensing information. The page content was not independently analysed for identity, so the real-world operator remains unconnected to any known brand or person. Registrant details are incomplete, and the domain is registered through Global Domain Group LLC. This is treated as ownership opacity, not as an identity contradiction. No third-party broker or regulator record matches this site, and this does not count against it. A token-claim offer of this kind normally warrants clear terms, issuer identity, and jurisdictional disclosures. None could be confirmed here. Evidence:

• Homepage: no operator name, registration number, licence reference, or legal-entity disclosure was identified.
• Registration: registrar is Global Domain Group LLC; registrant identity is incomplete; expiry is 2027-07-24.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-20; DV validation confirms domain control only and says nothing about operator identity.

What to Verify Next

The token claim should be traced to an official announcement by a known $PINO project, using independently sourced channels rather than links found on this page. Any contract address or claim mechanism should be confirmed against a recognised token explorer or project documentation before any wallet interaction. The operator's identity and any claimed affiliation should be confirmed through an independent registry or corporate record. Organisations should consider checking whether the domain appears in their own security-feed or takedown records, and whether it is being promoted through unsolicited messages or social posts. Evidence:

• Homepage: the claim call-to-action is the sole interaction path and should not be followed until independently validated.
• Domain age: registered 2026-07-24, so the domain predates any plausible long-running project history only by months.
• Reputation: the current detections should be rechecked against live feeds before any change in posture.

Summary Verdict

The available evidence supports an elevated-risk posture. Active external detections, a very young domain, and a token-claim lure format converge on a cautionary assessment. Apparent technical hygiene does not offset these signals, and the real-world operator is unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin host was not observable, so hosting cannot be independently verified, and content could be swapped without visible change at the edge. The valid certificate and well-known provider are mitigating factors only. They cannot offset the reputation risk and do not indicate legitimacy.

Closing Assessment

Treat the site as read-only at most. Do not connect a wallet, sign a transaction, enter credentials, or make any payment through it. Anyone who has already interacted with it should review and revoke wallet approvals and report the domain to the relevant security channels.