Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
portal-kiichain.xyz shows high-risk / scam indicators.
| What this site appears to be | Kiichain's public sale page offers the KII token to institutional and qualified buyers using USDC or USDT, with KYC required. It describes a pre-mainnet FX and settlement blockchain and promotes yield vaults, crypto cards, credit lines, and US virtual accounts. The page's own disclosures say the mainnet is not live, payment comes before delivery, and regulatory treatment is unsettled. The claims are not backed by verifiable licensing, audits, or independent network data, and the sale date shown has already passed. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Kiichain's public sale page, served from a recently created .xyz domain, presents a token public sale for the pre-mainnet KII token. Buyers are described as institutional and qualified, payment is in USDC or USDT, and KYC is required. The page positions the project as a 24/7 cross-border foreign-exchange and stablecoin settlement blockchain. It also promotes holder rewards, yield vaults, crypto cards, credit lines and US virtual accounts. The apparent business model is raising funds through token sales, with future platform fees as a presumed revenue source. The site has not been independently tied to a real-world brand or person (identity verification: unverified, score 30, confidence 0.25).
Scam/Impersonation Risk
No identity inconsistencies, brand impersonation or phishing behaviour were observed, and no confirmed adverse listing was found. Browser-behaviour testing showed no external data posts, no hidden forms and no wallet-drainer or clipboard-hijack activity. A single threat-intelligence engine flagged the domain as malicious. This is a soft third-party warning. It comes from one engine only, no other source corroborates it, and it does not meet the threshold for a confirmed finding. It is therefore given limited weight and is reported here rather than set aside. The main concern comes from the sale mechanics and the claims around them, which is why the assessment is cautionary. The homepage asks for payment in stablecoins before any network exists. Its own disclosures concede that the mainnet has not launched and that the explorer indexes only testnet data. It nonetheless advertises "$500M+" in historical on-chain volume, institutional backing, enterprise clients and registered users through headline counters. None of these can be checked against a live network, named investors or independent data. The homepage countdown shows a sale date of 11 August 2026, which has already passed, yet the page still reads "Sale Live". A stale deadline combined with a live payment call to action is consistent with a pressure-and-ambiguity pattern, though it may also reflect an unmaintained page. The page's candid warnings about total loss of funds are to its credit, but they do not close the evidence gap. The domain's "portal-" naming also means its connection to the official Kiichain project has not been independently established, and the evidence is consistent with, but does not demonstrate, an authorised sale venue.
- Homepage: stablecoin purchases are solicited across three fixed-price tiers while the mainnet is acknowledged as not live.
- Homepage: the sale countdown has expired but the page still shows "Sale Live".
- Homepage: the volume figures, "enterprise clients" and "registered users" counters and the institutional-backing claims have no linked evidence or named investors.
- Domain registered 2026-09-23 (~0.07 years, about 27 days old), with 1 archive snapshot (2026-09-27) and no meaningful history to corroborate the project.
- Threat-intelligence: one engine flagged the domain as malicious. This is an unconfirmed soft warning from a single source with no corroboration, so it is discounted but not dismissed.
Regulatory Verification Notes
The homepage makes several regulated-sector claims without any supporting licence, registrar number or audit report. These include FDIC-insured US accounts, a "non-custodial" design offered alongside credit lines, loans and virtual accounts, and "audited" yield vaults. Holding customer funds, extending credit and offering insured accounts normally require identifiable licensed entities and partner banks, and none are named. The page also gives no verifiable legal entity, registered address or working contact route. It acknowledges that regulatory treatment of the token is unsettled, which suggests that no regulatory clearance exists for the sale, though this has not been independently confirmed. Token allocation, vesting and fee structure are not disclosed on the visible page, so it is unclear where sale proceeds go or what buyers receive. No third-party broker or regulatory-database match was found for the site. This is absence of corroboration, not an adverse verdict.
- Homepage legal and FAQ content: the page admits unsettled regulatory treatment and payment before delivery, and names no licensed operator.
- Homepage product claims: FDIC-insured accounts, credit lines and audited vaults are asserted with no licence references or audit links.
- Hosting and TLS: served from AS13335 (Cloudflare, US); TLS certificate issued by YE1 (DV), valid to 2026-12-22.
- Registration: registered through Dynadot with a privacy service, expiring 2027-09-23.
What to Verify Next
Any decision to engage should first rest on confirming, through the official project channels reached independently of this site, that this domain is an authorised sale venue. Those channels include the project's documentation and verified social accounts, which should publish the sale address. The claimed banking and credit products should be matched to a named, licensed operator and partner bank in the relevant regulator's public register. Audit claims should be traced to published reports from the auditors themselves. Investor and backing claims should be confirmed with the named firms directly. Sale terms, including allocation, vesting, refund conditions and the current status of the sale, should be obtained in writing from an identifiable legal entity before any funds move. Official support and contact channels should also be confirmed offline.
- Homepage: the sale status and date conflict, so the sale's current validity needs confirming with the issuer.
- Homepage: the investor and team sections name no verifiable counterparties.
- Product claims: banking, insurance and audit assertions have no linked registry entries or reports.
Summary Verdict
The assessment is adverse, with classification confidence of 0.75. The site is a very young token-sale landing page whose payment-first mechanics and unsupported high-stakes claims place it in an elevated-risk category. The apparent technical hygiene of the site does not offset this. The project's real-world operator remains unverified, which means the operator has not been shown to be either legitimate or illegitimate. The single-engine malicious flag is a soft, uncorroborated reputation note and is not the basis for this verdict.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host could not be independently identified. The site presents a valid TLS certificate, and the bot-protection layer behaved normally in testing. This is a mitigating factor only. Such infrastructure is available to any site, legitimate or not, and it also prevents independent hosting verification. The domain's youth and sparse subdomain structure are unconfirmed heuristics that fit a newly launched property.
Closing Assessment
Prospective participants should hold back any payment, wallet connection or KYC document submission until the sale's authenticity and the operating entity are confirmed through independent official channels. Casual, read-only browsing carries the lowest exposure.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by page content, hosting and network, history in the web archive.
01 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of portal-kiichain.xyz.
- The request stayed on portal-kiichain.xyz. It was not redirected to another domain. Clear
- Registration is published under DYNADOT LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-23. Noted
- The earliest public archive of this site is from 2026-09-27. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | DYNADOT LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::ac43:8234 |
| Name servers | BRIAN.NS.CLOUDFLARE.COM, PAITYN.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2026-12-22 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-23 |
| Archive first seen | 2026-09-27 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about portal-kiichain.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.