Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
cashcat-claim.com shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The site cashcat-claim.com presents a single landing page titled "Cash Cat | Community Airdrop Claim · Robinhood". It invites visitors to claim a "community airdrop" of a token, and it places the name of a well-known retail brokerage in the page title. The apparent purpose is a claim funnel that tries to turn visitors into participants in a giveaway. The captured homepage is short and text-light, and the evidence shows no product, company or service content beyond the claim framing.
Scam/Impersonation Risk
This assessment is clearly cautionary. Contradictory signals are present and converge. The domain is blacklisted by external threat-intelligence sources, and at least two independent detection engines classify it as malicious. A third engine flags it as suspicious. This is a confirmed adverse reputation, not an inferred one. The site's own framing adds to the concern. An "airdrop claim" lure is a well-known pattern in crypto giveaway scams. These lures ask a visitor to connect a wallet, approve a transaction or enter credentials in order to receive free tokens. The page title also borrows the name of a major brokerage brand, and nothing in the evidence supports any affiliation with that brand. This is consistent with brand-borrowing to lend false credibility, but a formal impersonation finding is not asserted. The domain is also only weeks old and was registered shortly before the observed scanning. That is typical of short-lived claim and phishing infrastructure, and it removes any history that could offset the adverse reputation. Automated browsing found no wallet-connection prompt, clipboard manipulation or hidden credential forms during the observed sessions. This is a mitigating observation about what was seen, not evidence of safety, because such prompts are often shown only to selected visitors or after specific user actions. No conflicting legal identities were observed.
- Homepage: the page title combines "Community Airdrop Claim" with a major brokerage's name, with no evidence of affiliation.
- Domain registered 2026-08-27 (~0.16 years, ~59 days old).
- Reputation checks: two engines rate the domain malicious and one rates it suspicious, alongside a confirmed external blacklist entry.
- Automated sessions (three, all successful) recorded no wallet prompts, clipboard writes or hidden forms.
Regulatory Verification Notes
No regulator, licensing body or recognised third-party regulatory source is associated with this site. No match was found in the broker-reputation dataset. The brokerage-branded title raises a specific question, because a genuine airdrop or promotion from a regulated broker would be announced through that broker's own verified channels. Nothing on the site establishes an operating entity, registration number or jurisdiction. The domain is registered through a mainstream registrar with a privacy service, so the registration data reveals no operator. Real-world identity could not be independently connected to any brand or person, so no legitimacy should be inferred from the site's presentation. The valid certificate and mainstream hosting confirm only that the site is technically well-formed. They do not show who operates it or whether the claim offer is genuine.
- Registrar is NameSilo, LLC, with registrant details held behind a privacy service.
- Served from AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-23.
- Homepage: no licence, registration number or legal entity is evidenced in connection with the brokerage-style branding.
What to Verify Next
Anyone who reached this site through a message, advertisement or social post should treat the offer as unverified. The brokerage named in the page title should be contacted directly through its official website or app, entered manually, to ask whether any such airdrop exists. The original referral message or post should be traced and reported to the platform it came from. Any wallet that has already interacted with the site should have its token approvals reviewed and revoked, and the assets should be moved to a fresh wallet if there is any doubt. Any credentials entered should be rotated immediately. Official support channels for any related service should be confirmed through an independent route and not through links on this site.
- Homepage title: the claim offer is branded with a third party's name, so the third party is the correct authority to confirm or deny it.
- Browser sessions observed 27 external data requests and 9 external form submissions, all to recognised destinations. These are outbound data flows that should be reviewed if the site was used.
- Browser sessions recorded 12 console errors, which suggests an unpolished or hastily built page.
Summary Verdict
The overall posture is high-risk. Confirmed adverse reputation from several independent sources, together with a lure-style offer on a very new domain, outweighs every technical positive. The site is not an established or verified entity, and its legitimacy is not supported by the available evidence.
Infrastructure Integrity
The site is delivered through a major CDN and WAF. A valid certificate is in place, and the observed addresses are all CDN edge addresses, with no origin server visible. These are mitigating factors only. They show competent technical setup and bot protection, but they cannot offset the external threat detections. Edge-only visibility also prevents independent verification of the true hosting location, and it can mask rapid content swaps. That is relevant for a very young domain with few subdomains, where the content shown to automated scanners may differ from what real visitors later receive.
Closing Assessment
The site should not be used for anything beyond passive viewing. Wallets should not be connected, transactions should not be approved, and credentials, seed phrases and payment details should not be entered. Any offer that relies on it should be checked only through the official channels of the brand it names, and the site's own links should be avoided.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
04 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check.Registration and ownership
rule:KF_WHOIS_PRIVATE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 15% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of cashcat-claim.com.
- The request stayed on cashcat-claim.com. It was not redirected to another domain. Clear
- Registration is published under NameSilo, LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-27. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NameSilo, LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::6815:3bbe |
| Name servers | ANNA.NS.CLOUDFLARE.COM, SONNY.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-23 |
| Domain age | 0.16 years (continuous registration) |
| Domain expiry | 2027-08-27 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about cashcat-claim.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.