Is claim-cashcat.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Google flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a project hostname on a free, developer-oriented web hosting platform. Its name pairs the word "claim" with a cartoon-style brand term, a pattern common to reward-claim lures. When visited, it serves only a platform-issued "Suspected Phishing" warning, which states that the site has been reported for potential phishing. No product, service description, forms, links or trackers were visible, so the apparent purpose and business model of the underlying content cannot be established. The only observable function is that of a flagged page.

Scam/Impersonation Risk

Contradictory signals are present and decisive. A tier-one browser-security provider classifies the site under its social-engineering (phishing) threat category, and a multi-engine reputation scan returned two malicious detections. Together these amount to a confirmed blacklist condition from multiple independent reputation sources. The hosting platform's own interstitial independently warns that the site attempts to steal sensitive information by posing as a safe source. The hostname also closely resembles the name of the hosting platform it sits on, a typographic lookalike pattern that fits a disposable subdomain built to borrow credibility. Conflicting legal identities, a page-level impersonation of a named brand, and active phishing forms were not observed. The risk rests on the confirmed external listings and the warning page, not on any identity conflict. Because the destination content was not visible, the specific lure (for example a reward-claim or onboarding flow) cannot be described, and any login, credential, wallet or payment request tied to this hostname should be treated as hostile. Evidence:

• Homepage: the only content captured is a security interstitial reading "Suspected Phishing", stating that the site was reported for potential phishing. It contains no forms, links or service description.
• External reputation: the browser-security provider's match is in the social-engineering category, and two engines in the multi-engine scan flagged the domain as malicious.
• Hostname: the name closely resembles the hosting platform's domain, which indicates a lookalike or disposable subdomain pattern.
• Page behaviour: no hidden forms, password submissions to external destinations, wallet-connection attempts or clipboard manipulation were detected during three successful sandbox runs.

Regulatory Verification Notes

No licence, registration number, legal entity name, physical address or contact channel is visible, because the only page observed is a third-party warning rather than the operator's own content. Governance and ownership accountability are therefore unestablished, and the real-world operator is unverified. No third-party broker or regulatory-database record was matched, and no licensing claim is made anywhere. The absence of licensing is not itself treated as evidence of wrongdoing. The decisive concern is the confirmed external listing, which no disclosure could offset. The site's transport encryption is valid, but a domain-validated certificate only confirms control of the hostname. It is not evidence of legitimacy and is routinely obtained by phishing hosts. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US), registered through ARIN.
• Transport security: TLS certificate issued by YE1 (domain-validated), valid to 2026-12-19, about 58 days remaining.
• Homepage: no legal entity, licence reference, address or support channel appears on the captured page.

What to Verify Next

No verification step can make this hostname suitable for sensitive use while the listings stand. The relevant checks therefore concern how the link reached the user and who the real counterparty is. The originating message, advertisement or referral should be traced, and the claimed offer should be confirmed only by navigating directly to the official site of any brand it names, typed manually or opened from a trusted bookmark. Official support or contact channels should be confirmed through an independent route. Any person or organisation that has already interacted with this hostname should report the link to the platform operator and the relevant browser-security reporting channel. Credentials entered on it should be rotated, and linked financial accounts reviewed. Evidence:

• Homepage: the platform warning itself invites visitors to learn more about phishing and offers no operator information to verify against.
• External reputation: the listing remains active across several independent sources, so the hostname should be re-checked only after delisting is confirmed.

Summary Verdict

The available evidence supports a clearly elevated-risk, cautionary posture. Confirmed threat listings from independent reputation sources, combined with a platform-issued phishing warning and an unverified, unaccountable operator, outweigh the technical hygiene of the site's encryption and network setup. The site cannot be considered legitimate on the current evidence.

Infrastructure Integrity

The site is delivered through a mainstream content-delivery and web-application-firewall provider, and every observed address is a provider edge address. The origin server was not observable, so independent verification of the underlying host is not possible. This arrangement is a mitigating factor for availability and baseline hygiene only. It does not offset the external threat detections, and edge-only visibility allows hosted content to be changed quickly without outside notice.

Closing Assessment

Do not log in, enter credentials, connect a wallet, or make any payment or personal-data submission on this hostname. Leave the page without interacting, and report the link to the relevant platform and security channels.