Is Snapshot-Moltbook a scam? TrustSniffer's high-risk assessment of snapshot-moltbook.com: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is served at a domain name that pairs "snapshot" with the name Moltbook. Its home page is titled "moltbook - the front page of the agent internet," which presents it as a content-aggregation or community-style front page for an "agent internet." The captured page carried a substantial amount of text and loaded normally. Its business model and operator could not be established from the available evidence.

Scam/Impersonation Risk

This is the decisive area of the assessment. Multiple independent security-intelligence sources currently flag the domain as malicious. Several tier-one security vendors are among them, and a further set of engines rate it suspicious. The result is a confirmed blacklist-level reputation hit, strong enough to override every positive technical signal. The domain was registered only a few months ago and has almost no archived history, so there is no record of prior benign operation to offset the detections. The domain name also combines a "snapshot" prefix with an existing-sounding brand name. That pattern is typical of mirrors, clones and lookalike properties, so the site could be a derivative of the Moltbook name. No conflicting legal entities were observed, and the evidence does not establish which specific brand is being imitated. Behavioral testing was largely unremarkable. No wallet-connection prompts, clipboard manipulation, hidden forms, credential posts to third parties or cloaking were observed. A malicious reputation does not require overt behavior during a short automated session, and content can change quickly. These clean behavioral results therefore do not mitigate the reputational finding. The page also produced a high volume of console errors and relied heavily on external requests, which is consistent with a hastily assembled or templated front end. Evidence:

• Home page and domain reputation: 17 engines returned malicious verdicts and 3 returned suspicious verdicts, including several tier-one vendors, and the external blacklist is confirmed.
• Domain provenance: registered 2026-07-23 (~0.27 years, ~97 days old); the web archive holds 1 snapshot, dated 2026-07-25 (1 year tracked), so there is effectively no prior history.
• Home page behavior: 23 external fetch/XHR calls, none to non-whitelisted destinations; 0 external POSTs; 0 wallet, clipboard, hidden-form or cloaking events across 3 successful runs.
• Home page rendering: 69 console errors and 614 DOM mutations after interaction.

Regulatory Verification Notes

No licensing, registration or regulatory standing could be associated with this site. The available evidence contains no legal or identity page content from which a named operating company, license number or registry affiliation could be drawn, and the on-page disclosure position remains unclear. Registration data is incomplete on the owner side, which is ownership opacity. It is an administrative limitation, not an identity contradiction. It does mean there is no accountable counterparty to hold responsible. No third-party broker or regulatory-database record matches the site, and that absence is not a verdict in either direction. The security detections described above are the weight-bearing concern here. The licensing gap is secondary. The site cannot be treated as a regulated or supervised service on current evidence. Evidence:

• Registration: registrar NICENIC INTERNATIONAL GROUP CO., LIMITED; created 2026-07-23, expires 2027-07-23, with owner details incomplete.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-20 with 51 days remaining. DV validation confirms control of the domain, not the identity of the operator.
• Home page: no operator name, license or registry reference was identified in the captured content.

What to Verify Next

Any engagement should be preceded by independently establishing whether this domain is officially connected to the Moltbook brand. The operator should confirm this through a channel not reached via this site, such as the brand's own known official domain and announcements. The domain should be re-checked against current threat-intelligence listings and the vendors' delisting or false-positive status before any change in posture. If the site claims regulated or financial functionality, the operator's legal name and any license should be confirmed directly with the relevant public registry, and nothing on the site should be accepted as proof. Any need for the site's content should be met through the official brand's own domain. Evidence:

• Home page title: it asserts a brand-like identity ("the front page of the agent internet") that nothing on the page independently substantiates.
• Domain history: a single archive capture and a registration of only a few months leave no historical baseline to compare against.
• Reputation: the security detections are current and unresolved, so a later re-scan is the objective test of any remediation.

Summary Verdict

The site carries an elevated, high-severity risk posture. Current external threat detections are decisive and are not offset by the young domain's otherwise orderly technical presentation. The operator is not independently identified. Legitimacy is not supported by the evidence, and the site is not suitable for sensitive interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN/WAF, and every observed IP address is a Cloudflare edge address on AS13335 in the US, with no origin server visible. This is mainstream protective infrastructure, and the transport certificate is valid. It acts only as a mitigating factor. Because only edge addresses are visible, the true hosting location cannot be independently verified, and content could be swapped quickly behind the edge. Infrastructure protections cannot offset the reputation risk.

Closing Assessment

At most, the site should be viewed read-only from an isolated, disposable browser environment. No account login, credential entry, wallet connection, payment or financial interaction is appropriate, and nothing should be downloaded from it. Anyone seeking the genuine Moltbook service should reach it through its officially published address, not through this domain.