Is claim-cashcat.live safe? TrustSniffer's low-trust assessment: 25/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, claim-cashcat.live, currently presents no product, service or payment flow to a visitor. The only content captured is a security warning page, which says the requested site has been reported for potential phishing and offers "Learn More" and "Ignore & Proceed" options. The underlying business model cannot be determined from this capture. The domain name's "claim" wording suggests a reward-claim or giveaway-style proposition, but that is an inference from the name and is not confirmed by any observed content.

Scam/Impersonation Risk

This assessment is clearly cautionary. Contradictory signals are present: the domain is on confirmed blacklists from multiple independent threat-intelligence sources, and several engines classify it as malicious, including two tier-one security vendors. The site's own hosting-layer warning corroborates these detections. The age profile points the same way: the domain was registered only about a month before assessment, and its archive footprint is thin, with two snapshots taken on the day of registration. Newly registered domains with reward-claim naming and immediate third-party flags fit the usual pattern of short-lived phishing or lure infrastructure. No brand impersonation was observed and no conflicting legal identities were found, because no underlying content was available to test either. The risk therefore rests on the blacklist and detection evidence, not on any observed fake-brand content. Because the capture was blocked, the absence of a login form, wallet prompt or hidden form is not evidence of safety. Evidence:

• Domain registered 2026-09-19 (~0.09 years old), so the domain is about a month old.
• Archive shows 2 snapshots, first and last seen on 2026-09-19, so there is no meaningful history.
• Homepage capture returned a blocked response with a third-party phishing-report flag and no underlying content.
• Multiple independent reputation sources flag the domain as malicious, and it is on an external blacklist.

Regulatory Verification Notes

The captured page contains no legal, terms, privacy or about content. It names no operating entity, licence or registration number, so there is nothing to assess against a regulator's register. The site's governance and ownership are opaque, and ownership details are hidden or incomplete. That is an opacity concern, not an identity contradiction, but it removes any basis for attributing the site to a real-world operator. No third-party broker profile exists for this domain, so no broker reputation signal applies. Transport encryption is present, but a basic DV certificate says nothing about the operator's legitimacy. Evidence:

• The domain is registered through NICENIC International Group Co., Limited, with expiry set for 2027-09-19.
• The TLS certificate was issued by YE1 at DV level, valid to 2026-12-18.
• The site is hosted on AS13335 (Cloudflare, Inc., US).
• The homepage capture shows no licence, company name or registration number.

What to Verify Next

Any visitor should first establish how they reached this domain. A link received by message, email, social media or advertisement promising a reward or claim should be treated as unsolicited until the sender is independently confirmed. If the site claims affiliation with a known brand or platform, that claim should be checked by reaching the brand through channels found independently of this site, such as its official app or a typed-in known address. If any financial or investment offer later appears, the claimed licence should be checked directly with the relevant registry. Official support and contact channels should also be confirmed offline before any engagement. Evidence:

• The only captured content is a phishing-warning page, with no operator or offer details.
• The domain name suggests a claim or giveaway proposition that nothing observed substantiates.
• The page offers an "Ignore & Proceed" option, which bypasses the warning.

Summary Verdict

The available evidence supports an elevated-risk posture. Multiple independent detections, a very recently created domain and an operator that cannot be identified point the same way. The site cannot be treated as a legitimate or safe destination on the present record.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin server could not be seen. The CDN and WAF are mitigating signals only: they protect the site from attack but do not vouch for its content or operator. Edge-only visibility also prevents independent verification of the real hosting and allows content to be swapped quickly. The shared infrastructure has no abuse reports of its own, and it cannot offset the external threat detections.

Closing Assessment

The site should be avoided for any login, credential entry, wallet connection, payment or personal-data submission, and nothing should be downloaded from it. If a visit is unavoidable, it should be limited to passive viewing in an isolated environment. A user who has already entered credentials or payment details should change those credentials and notify the relevant provider.