Is claim-fortraders.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, presented under the domain claim-fortraders.com, is a single-page promotional property titled "For Traders — Founding Trader Pass | Free Claim". It invites visitors to claim a free "founding trader pass" aimed at trading audiences. Its apparent purpose is to drive visitors into a claim or sign-up flow, and the site shows no product, service, or company context beyond that offer.

Scam/Impersonation Risk

Contradictory signals are present and decisive. The domain is blacklisted: a large cluster of security vendors independently flags it as malicious or suspicious, and several tier-one engines are among them. This is a corroborated external consensus, not a lone outlier. The offer is a "free claim" of a "founding" pass, a pattern commonly used to lure traders into surrendering credentials, wallet access, or payment details. The domain was registered only a few months ago, so a free-claim lure has had almost no time to build organic reputation. The homepage generated heavy outbound request traffic during sandbox sessions, including a large number of cross-origin POST requests, a few of them to destinations outside the recognised-service set. No wallet-connection prompts, clipboard manipulation, hidden forms, or content cloaking were observed, so the concern comes from external reputation and the lure pattern, not from observed on-page exploit mechanics. No brand impersonation or conflicting legal identities were established, and the site's real-world operator remains unconfirmed. Evidence:

• Homepage: titled as a free "Founding Trader Pass" claim, with no accompanying company, product, or service substance.
• Domain registration: registered 2026-08-01 (~0.24 years old), expiring 2027-08-01.
• Web archive: 1 snapshot, captured in 2026 (1 year tracked), so there is no meaningful history to offset the current detections.
• Sandbox behaviour: 35 external XHR requests and 33 external POSTs, 3 of each to non-whitelisted destinations; 3 of 3 runs completed with no wallet-drainer, clipboard-hijack, or cloaking activity.

Regulatory Verification Notes

The captured homepage carries no clear company name, licence, or registration reference, and the available evidence does not link the site to any identifiable legal entity or regulated financial firm. Ownership is opaque. This is a transparency limitation and is not treated as proof of wrongdoing, but here it compounds the confirmed threat detections instead of standing alone. No third-party broker or regulator-style record matched this domain, so there is no independent assurance that the "founding trader" offer is backed by a licensed provider. The technical hygiene observed (a valid certificate and mainstream hosting) is routine for newly created sites, including malicious ones, and does not establish legitimacy. Evidence:

• Homepage: no licence, registration number, or operating-company disclosure appears.
• Registrar: the domain is registered through NICENIC International Group Co., Limited.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-28.

What to Verify Next

No account login, credential entry, wallet connection, or payment should be attempted on this site. If the "founding trader pass" appears to come from a real trading platform or broker, its existence should be confirmed by reaching that organisation through its independently known website or app, never through a link or message that led to this domain. Any claimed licence should be checked against the relevant financial regulator's public register. Anyone who already entered details on the site should change the affected passwords, revoke any wallet permissions granted, and monitor the relevant accounts. The official support and contact channels should be confirmed through an independent route. Evidence:

• Homepage: the free-claim flow is the only offer presented, with no verifiable sponsor behind it.
• Threat intelligence: a broad vendor consensus currently flags the domain, so any link to it should be treated as hostile until it is cleared.
• Domain age: the site is only months old, which leaves no track record to rely on in place of independent confirmation.

Summary Verdict

The overall posture is high risk. Corroborated external threat detections combine with a very young domain, an unverified operator, and a free-claim lure aimed at traders. Those protective technical features that are present do not offset the reputational evidence. The site cannot be treated as a trustworthy counterparty for any sensitive interaction.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed IP addresses are edge servers, so the true origin host cannot be independently identified. The transport certificate is valid and the hosting network has a clean abuse record. These are mitigating factors only. The edge-only visibility also prevents independent hosting verification and would allow content to be swapped quickly. A young domain with sparse subdomains is an unconfirmed heuristic and is not treated as a confirmed risk.

Closing Assessment

Interaction should be limited to passive viewing at most. The site should not be used for login, credential entry, or any financial or wallet action. Links to it should be reported and not forwarded, and the domain should be re-assessed only if the external detections are cleared and an accountable operator is independently identified.