Is opneclawai.top safe?
http://opneclawai.top/
Coveragestrong3 of 4 applicable core capabilities
opneclawai.top is a crypto drainer impersonating an AI trading tool, with a live '$1COIN' buy page that contradicts the impersonation.
opneclawai.top is a 176-day-old domain that independent research identifies as a cryptocurrency drainer posing -powered trading analyst for Solana tokens, prompting visitors to connect their wallets so a malicious script can move funds to the operator. A separate threat-intelligence source assesses the domain as brand impersonation, and a third gives it a 1/100 trust score. The captured page, however, shows a '$1COIN' promotional page with a cartoon coin, a slot machine graphic and 'BUY' buttons, which does not match the OpenClaw AI impersonation described in the research. That mismatch suggests the site rotates landing pages or runs more than one scam from the same host. Twelve antivirus families also returned an adverse result on the domain. The combination of a wallet-drainer flow, brand impersonation, a very young domain and a contradictory live page places this in the Dangerous band.
Be the first to review opneclawai.top
Lost money to opneclawai.top? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
opneclawai.top is a 176-day-old domain that independent research identifies as a cryptocurrency drainer posing -powered trading analyst for Solana tokens, prompting visitors to connect their wallets so a malicious script can move funds to the operator. A separate threat-intelligence source assesses the domain as brand impersonation, and a third gives it a 1/100 trust score. The captured page, however, shows a '$1COIN' promotional page with a cartoon coin, a slot machine graphic and 'BUY' buttons, which does not match the OpenClaw AI impersonation described in the research. That mismatch suggests the site rotates landing pages or runs more than one scam from the same host. Twelve antivirus families also returned an adverse result on the domain. The combination of a wallet-drainer flow, brand impersonation, a very young domain and a contradictory live page places this in the Dangerous band.
The wallet-connect flow is the core threat
Independent research describes the site as posing -powered trading analyst for Solana tokens and prompting visitors to connect their cryptocurrency wallets. The same source states it is a cryptocurrency drainer built to steal digital assets from victims. This is the defining mechanic of a drainer: the visitor is asked to approve a wallet connection, and the approval is used to move assets out.
A separate threat-intelligence assessment rates the domain at an elevated risk level specifically for brand impersonation, which is consistent with the site presenting itself as a legitimate AI trading product while operating as a drainer.
A third source gives the domain a 1/100 trust score and states it should not be treated as a safe website. Twelve independent antivirus families also returned an adverse result on the domain, so the detection is not a single-vendor outlier.
The live page shows a different scam than the research describes
The screenshot captured from the site shows a promotional page for '$1COIN' with a cartoon coin character, a slot machine graphic and a 'BUY' button. That does not match the external research identifying the site as an OpenClaw AI impersonation. The most likely explanation is that the site changes its landing page content or hosts multiple scams from the same domain.
The page text confirms the '$1COIN' theme: the captured blocks include 'How to Buy', 'BUY 🎰' and 'BUY $1COIN 🪙'. These are the site's own commercial calls to action, and they point to a token purchase rather than the wallet-connect drainer described in the research. Either way, the visitor is being pushed toward a crypto transaction on a domain that independent sources flag as malicious.
The domain is only 176 days old, which is consistent with a short-lived scam operation rather than an established product. No direct contact email was found on the captured page, so there is no obvious way for a visitor to reach a real operator.
Clean technical checks do not offset the operator risk
The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection. Those are technical hygiene signals only: they mean the connection is encrypted and no blocklist entry was returned at the time of the check, not that the site is safe to use.
The operator risk is what drives the score. Independent research describes a wallet-draining operation, a threat-intelligence source flags brand impersonation, and a third gives a 1/100 trust score. The site does not disclose an operator, and the captured page offers no contact email. A visitor who connects a wallet or buys the promoted token is exposed to total loss of the assets in that wallet.
Why the score is 12
12 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
14/ 92
detectionsSaved analysis from October 4, 2026 - stale
14 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 13
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| alphaMountain.aiMalicious | phishing |
| BitDefenderMalicious | phishing |
| Forcepoint ThreatSeekerMalicious | malicious |
| FortinetMalicious | malware |
| G-DataMalicious | phishing |
| GridinsoftMalicious | phishing |
| LevelBlueMalicious | phishing |
| LionicMalicious | malicious |
| RisingMalicious | malicious |
| SeclookupMalicious | malicious |
| SOCRadarMalicious | phishing |
| SophosMalicious | phishing |
| VIPREMalicious | phishing |
| ESETSuspicious | suspicious |
All 92 engine results
- alphaMountain.ai - phishing - Malicious
- BitDefender - phishing - Malicious
- Forcepoint ThreatSeeker - Malicious
- Fortinet - malware - Malicious
- G-Data - phishing - Malicious
- Gridinsoft - phishing - Malicious
- LevelBlue - phishing - Malicious
- Lionic - Malicious
- Rising - Malicious
- Seclookup - Malicious
- SOCRadar - phishing - Malicious
- Sophos - phishing - Malicious
- VIPRE - phishing - Malicious
- ESET - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Snort IP sample list - Unrated
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- Synthient - Unrated
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
The screenshot shows a promotional page for '$1COIN' with a cartoon coin character, a slot machine graphic, and a 'BUY' button, which contradicts the external research identifying the site as a 'OpenClaw AI' impersonation. This suggests the site may change its landing page content or host multiple scams.
What the captured page showed
1 observation- 01
The screenshot shows a promotional page for '$1COIN' with a cartoon coin character, a slot machine graphic, and a 'BUY' button, which contradicts the external research identifying the site as a 'OpenClaw AI' impersonation. This suggests the site may change its landing page content or host multiple scams.
03 · Investigation Story
Investigation story
What the site claims
$1COIN — one coin. one shot. 🎰
What we observed
The page content was captured and checked alongside 62 antivirus results.
What independent research found
3 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Investment, Crypto & Wallet Fraud
Service and business model
Web3
Observed behavior
Evidence behind this classification
- 013 independent sources carry complaints or warnings about this site, including: "The site poses as an AI-powered trading analyst for Solana tokens and prompts visitors to connect their cryptocurrency wallets. It is a cryptocurrency drainer…"
- 023 independent sources carry complaints or warnings about this site, including: "opneclawai.top should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and publicly displayed security sources report"
- 033 independent sources carry complaints or warnings about this site, including: "The domain opneclawai.top is assessed with an elevated risk level due to its specific threat type of brand impersonation."
Web research findings
Independent findings for opneclawai.top, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PCriskopen
"The site poses as an AI-powered trading analyst for Solana tokens and prompts visitors to connect their cryptocurrency wallets. It is a cryptocurrency drainer built to steal digital assets from victims."
- Gridinsoftopen
"opneclawai.top should not be treated as a safe website. Gridinsoft gives it a 1/100 trust score, and publicly displayed security sources report"
- PhishDestroyopen
"The domain opneclawai.top is assessed with an elevated risk level due to its specific threat type of brand impersonation."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainopneclawai.top
- Redirects toopneclawai.top
- Hosted byCloudflare, Inc.
- Referencesfonts.googleapis.com · fonts.gstatic.com
Domain Timeline
- Apr 25, 2026Domain registered
First appeared in WHOIS records — 5 months old when this review was saved.
- Oct 19, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
opneclawai.top was registered very recently when this review was saved and was already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Redirect Chain
- 1301http://opneclawai.top/
- 2200https://opneclawai.top/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
12 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
3 independent sources carry complaints or warnings about this site, including: "The site poses as an AI-powered trading analyst for Solana tokens and prompts visitors to connect their cryptocurrency wallets. It is a cryptocurrency drainer…" · 3 independent sources carry complaints or warnings about this site, including: "The domain opneclawai.top is assessed with an elevated risk level due to its specific threat type of brand impersonation."
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 14 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Oct 4, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 19, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 19, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 19, 2026 |
| Independent research | 3 independent findings were saved | Completed | Adverse | this scan · Oct 19, 2026 |
- Antivirus
- Result14 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Oct 4, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 19, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 19, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 19, 2026
- Independent research
- Result3 independent findings were saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 19, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is opneclawai.top a scam or a legit crypto platform?
Is opneclawai.top safe to use?
What should I do if I already sent funds to opneclawai.top?
Can I get my money back from opneclawai.top?
Is opneclawai.top a Ponzi scheme or a real crypto investment?
How do I report opneclawai.top?
Why does opneclawai.top look legitimate if it's a scam?
Has opneclawai.top been flagged by antivirus engines?
Is opneclawai.top on any phishing or malware blacklists?
How old is the opneclawai.top domain?
Where is opneclawai.top hosted?
How often is the opneclawai.top report updated?
08 · Final Verdict
Final verdict
opneclawai.top is a crypto drainer impersonating an AI trading tool, with a live '$1COIN' buy page that contradicts the impersonation.
opneclawai.top is a 176-day-old domain that independent research identifies as a cryptocurrency drainer posing -powered trading analyst for Solana tokens, prompting visitors to connect their wallets so a malicious script can move funds to the operator. A separate threat-intelligence source assesses the domain as brand impersonation, and a third gives it a 1/100 trust score. The captured page, however, shows a '$1COIN' promotional page with a cartoon coin, a slot machine graphic and 'BUY' buttons, which does not match the OpenClaw AI impersonation described in the research. That mismatch suggests the site rotates landing pages or runs more than one scam from the same host. Twelve antivirus families also returned an adverse result on the domain. The combination of a wallet-drainer flow, brand impersonation, a very young domain and a contradictory live page places this in the Dangerous band.
09 · Community