Is Claim-Farmtown a scam? TrustSniffer's high-risk assessment of claim-farmtown.online: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, claim-farmtown.online, presents no content of its own to a visitor. The only page captured at its homepage was a hosting-provider security interstitial titled "Suspected Phishing", which was served in place of the site. The domain name pairs a reward-claim prefix with a game-themed label, a naming pattern commonly used for promotional "claim" lures. Its apparent purpose cannot be established from the site, and the evidence indicates a newly registered domain with no legitimate business footprint.

Scam/Impersonation Risk

This is the decisive area. Multiple threat-intelligence engines currently classify the domain as malicious, and further engines rate it suspicious. At least one major security vendor lists it as a threat, so the domain is blacklisted by external sources. The capture of the homepage was blocked behind a bot challenge, and the interstitial that replaced the site is itself a phishing warning. This is consistent with an actively flagged phishing or reward-claim lure. Behavioural testing found heavy outbound traffic: roughly nine in ten of the observed external requests were to third-party destinations, with 21 external background requests, 9 external posts and about 30 console errors across three runs. None of this traffic went to unlisted destinations, and no wallet-drainer, clipboard-hijack, hidden-form or credential-forwarding behaviour was detected. Those are mitigating observations, but they do not offset the reputational finding. No conflicting legal identities and no brand impersonation were established, so the risk rests on the threat listings and the phishing warning, not on identity inconsistency. Evidence:

• Homepage: capture returned a 403 bot-challenge page titled "Suspected Phishing", and only a short block of text was recoverable.
• Domain registration: registered 2026-06-18 (~0.37 years old, expiring 2027-06-18).
• Web-archive depth: 1 archive snapshot, dated 2026-07-04 (1 year tracked), so there is no meaningful independent history.
• Behavioural runs: external requests accounted for about 91% of observed traffic at peak, with no wallet or credential-theft behaviour detected.

Regulatory Verification Notes

The only content captured was the interstitial, so no legal, terms, privacy, licensing or company-registration pages could be assessed from the site itself. Ownership opacity applies: no operator can be tied to the domain, and it was registered through NICENIC International Group Co., Limited with incomplete owner details. This is an administrative limitation and not an identity contradiction. No broker or regulatory-database match exists, and no third-party regulator relationship was found. The licensing question is secondary here, because the active threat listings already prevent any reliance on the site. Evidence:

• Registration: domain held through NICENIC International Group Co., Limited, created 2026-06-18.
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-12. This confirms encryption only and says nothing about the operator.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Broker reputation database: no match for this domain.

What to Verify Next

Any interest in the offer should be verified independently of this domain. First, if the link arrived through a message, advertisement or social post, confirm with the purported brand through its officially published channels, using a route not supplied by the message. Second, check whether the domain is listed on that brand's official domain or promotions pages. Third, if an operator claims the site is legitimate or has been wrongly flagged, ask for evidence of ownership and the business's registered legal identity, and confirm it with the relevant corporate registry. Finally, anyone who already interacted with the site should treat entered details as exposed. Evidence:

• Homepage: the hosting provider's own warning page replaced the site content.
• Domain age: the domain is under five months old, so no long-standing brand association can be assumed.
• Third-party listings: current malicious and suspicious classifications are unresolved, with no sign of a clean re-assessment.

Summary Verdict

The assessment is a critical-risk posture. The site is externally flagged as a threat, shows no independent history, and offers no verifiable operator or legitimate business. Technical hygiene such as encryption and standard hosting does not outweigh these findings, and the site should be treated as a probable phishing or reward-claim lure.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four resolved addresses (two IPv4 and two IPv6) are edge servers, so the origin server was not observable. Bot protection is active. This protective layer is a mitigating factor only. It prevents independent verification of where the content is actually hosted and does not indicate the operator is legitimate. It cannot offset the threat detections.

Closing Assessment

Do not enter credentials, personal or payment details, or connect any wallet or account on this domain, and do not download anything from it. Any interaction should be limited to non-sensitive viewing, and the link should be reported to the impersonated brand or to the relevant phishing-reporting service.