Web Intelligence

UNIFIED TRUST
INTELLIGENCE FOR
EVERY THREAT SURFACE.

TrustSniffer synthesises multi-layered intelligence across infrastructure, behaviour, history, and on-chain exposure into a single, explainable verdict — giving your team the confidence to act decisively.

Unified Evidence Synthesis
Real-time assessment
Auditable verdicts
Idle
18,400+
Websites Assessed
Multi-Layer
Intelligence Synthesis
Real-Time
Live Assessment
Explainable
Auditable Verdicts
How It Works

From URL to verdict in three steps

1

Submit Any URL

Paste a domain or full URL. TrustSniffer immediately begins a comprehensive, live assessment — no configuration, no waiting for a crawl queue.

instant · no setup required
2

Multi-Layered Intelligence

Six independent intelligence domains assess the target simultaneously — surface behaviour, infrastructure integrity, historical reputation, and on-chain exposure — each contributing weighted evidence.

concurrent · independent · weighted
3

Decisive Verdict

The Trust Judgment Engine synthesises all evidence into a single, explainable verdict with full signal attribution — giving your team the clarity to act without ambiguity.

explainable · auditable · decisive
Intelligence Domains

Multi-Layered Trust Intelligence

Six independent intelligence domains assess every target simultaneously. Each domain contributes weighted evidence to the final verdict — no single signal is decisive alone.

Surface

Surface Behaviour Analysis

Identifies credential harvesting patterns, deceptive UI flows, and brand impersonation by analysing the live rendered state of the target — not cached snapshots.

High Confidence — Threat Detected
Credential harvesting pattern confirmed. Deceptive login flow with no legitimate authentication endpoint.
Confidence94%
Infrastructure

Infrastructure Integrity

Evaluates the hosting environment, domain provenance, and network topology for indicators associated with fraudulent or high-risk operations.

Elevated Risk — Review Required
Recently registered domain on high-risk hosting infrastructure. Provenance inconsistent with stated business age.
Confidence81%
History

Historical Reputation

Cross-references the target's historical footprint against known fraud timelines, content evolution patterns, and domain lifecycle indicators.

Insufficient History — Caution
No verifiable historical presence. First-seen indicators suggest a newly-created entity with no established reputation.
Confidence67%
Conduct

Operational Conduct

Assesses user-facing operational patterns — withdrawal friction, access controls, and UX design choices — against profiles of known fraudulent platforms.

Suspicious Patterns — Flagged
Operational design consistent with platforms that restrict user withdrawals. Urgency-based UX patterns detected.
Confidence73%
On-Chain

On-Chain Exposure

Correlates the target's claimed protocol presence against verified on-chain data — TVL, governance participation, and cross-referencing with known exit-scam signatures.

Unverified Claims — Caution
Protocol claims cannot be verified against on-chain data. No independently auditable TVL or governance record found.
Confidence58%
Social

Community & Social Signals

Evaluates the authenticity and provenance of the target's community presence — distinguishing organic engagement from manufactured social proof used to build false legitimacy.

Inauthentic Signals — Flagged
Community presence shows characteristics of manufactured engagement. Admin identity cannot be independently verified.
Confidence69%
Live Engine Output

Every signal,
in real time.

Watch the intelligence pipeline execute. Each module emits structured events as it runs — DNS resolution, SSL validation, DOM inspection, behavioral scoring — streamed live to your dashboard and API consumers.

  • Structured JSON events per module
  • WebSocket delivery for real-time consumers
  • Full audit trail — every signal attributed
analysis-engine · live output run_id: —
Trust Judgment Engine

Not a score.
A verdict.

The Trust Judgment Engine doesn't average signals — it weighs them. Each intelligence domain contributes evidence proportional to its relevance and confidence, producing a verdict that reflects the true risk profile of the target, not a statistical artefact.

  • Every verdict is fully attributed — your team sees exactly which intelligence domain drove the outcome.
  • Assessments reflect the live state of the target — not a cached result from days or weeks ago.
  • Verdicts are exportable as structured reports — ready for audit trails, compliance reviews, and legal proceedings.
Intelligence Domain Contribution example-broker.io
Page Intelligence 88 / 100
Fake login form · credential harvesting · 3 redirects
DNS & Infrastructure 72 / 100
4-day-old domain · bulletproof host · high-risk ASN
Behavior Signals 55 / 100
No captcha · high withdrawal friction · urgency patterns
Archive & History 30 / 100
Zero archive snapshots · first-seen domain
Telegram Presence 45 / 100
Unverified channel · 312 members · no admin verification
DeFi Exposure 20 / 100
Not listed on DeFiLlama · no TVL data
Final Trust Score
100 / 100
Verdict
BLOCK
Trust Verdict

The Trust Verdict Band

Every website resolves to one of four verdicts. The band is derived from the weighted aggregation of all six module scores.

TRUSTED
Score 70–100.
Strong positive signals across modules.
score ≥ 70
CAUTION
Score 40–69.
Mixed signals — manual review advised.
40 ≤ score < 70
RISKY
Score 20–39.
Multiple high-severity signals detected.
20 ≤ score < 40
BLOCK
Score < 20 or hard hit.
Confirmed fraud or phishing.
score < 20
Use Cases

Built for teams that cannot afford a miss

Marketplace Trust

Seller Vetting

Screen every new seller's website before onboarding. Block phishing clones and fake storefronts before they reach your customers.

Fraud Operations

Triage at Scale

Integrate the API into your fraud queue. Automatically score reported URLs and prioritise analyst time on the highest-risk cases.

Security Teams

Phishing Detection

Detect credential harvesting pages, fake login forms, and brand impersonation before users are exposed. PDF evidence export for incident reports.

Compliance

Third-Party Risk

Assess vendor and partner websites as part of your third-party risk management programme. Explainable verdicts for audit trails.

Crypto Platforms

Broker Legitimacy

Cross-reference broker websites with DeFiLlama listings, Telegram presence, and infrastructure signals to detect unlicensed operators.

API Integration

Automated Pipelines

REST API with JSON output, webhook delivery, and PDF report generation. Integrate into any workflow in minutes.

Marketplace Trust

Seller Vetting

Screen every new seller's website before onboarding. Block phishing clones and fake storefronts before they reach your customers.

Fraud Operations

Triage at Scale

Integrate the API into your fraud queue. Automatically score reported URLs and prioritise analyst time on the highest-risk cases.

Security Teams

Phishing Detection

Detect credential harvesting pages, fake login forms, and brand impersonation before users are exposed. PDF evidence export for incident reports.

Compliance

Third-Party Risk

Assess vendor and partner websites as part of your third-party risk management programme. Explainable verdicts for audit trails.

Crypto Platforms

Broker Legitimacy

Cross-reference broker websites with DeFiLlama listings, Telegram presence, and infrastructure signals to detect unlicensed operators.

API Integration

Automated Pipelines

REST API with JSON output, webhook delivery, and PDF report generation. Integrate into any workflow in minutes.

// Inspect Any URL

See the verdict
for yourself.

Submit any URL and receive a full trust verdict with complete intelligence attribution — in seconds.