Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
claim-gvrt.live shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 3 months oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
The website at claim-gvrt.live is a single-page, token-allocation-style landing page titled "GRVT Allocation". Its domain name and title frame it as a place to claim or check an allocation. Its automated capture was served behind a bot challenge, and only a very small amount of visible text was recovered. The apparent purpose is to steer visitors toward an allocation-claim interaction. The page names no operator, product description, or business model.
Scam/Impersonation Risk
Hard contradictory signals are present. Several independent security engines currently flag the domain as malicious or suspicious, and the domain also appears on an external blacklist, so this is a confirmed blacklisting rather than a soft reputational concern. The domain is also very new. The "claim" wording combined with an "allocation" title follows the pattern of lure pages that invite visitors to claim tokens or rewards. These pages typically lead to wallet connection or credential and onboarding steps. The evidence does not show a legal-entity conflict or a confirmed brand impersonation. Behavioural testing found no wallet-connection prompts, wallet-drainer activity, clipboard manipulation, hidden forms, or externally posting password forms. The page also showed heavy dependence on third-party requests and repeated console errors. A lack of observed malicious behaviour during a challenge-gated capture does not offset the external detections, because the interactive surface was not fully exposed to testing. Evidence:
- Homepage: titled "GRVT Allocation" on a domain whose name leads with "claim", and only a minimal amount of text (about 310 characters) was visible after the bot challenge.
- External reputation: 5 engines classed the domain as malicious and 2 as suspicious, and a separate blacklist entry exists; the infrastructure's clean abuse history does not apply to this domain.
- Domain registration: created 2026-07-21 (~0.27 years, about 97 days old).
- Homepage behaviour: 27 external XHR/fetch requests and 9 external POSTs (all to whitelisted destinations), 9 console errors, and no wallet, clipboard, or hidden-form activity across 3 successful test runs.
Regulatory Verification Notes
The page discloses no legal entity, licence, registration number, terms, privacy policy, or contact details, so its on-page identity cannot be assessed. Any connection to a real GRVT-branded project or its operator is unverified, and the site's own naming cannot serve as proof of affiliation. The registrant is not visible, which is ownership opacity. This is an administrative limitation and not an identity contradiction. No third-party broker or regulator listing matched this site, so no regulatory standing can be attributed to it. A claim page with no accountable party leaves a user without recourse if funds or assets are lost. Evidence:
- Homepage: no operator name, licence, or registration disclosure in the captured content.
- Registration: registered through PDR Ltd. d/b/a PublicDomainRegistry.com, with registration running to 2027-07-21.
- Transport: Served from AS13335 (Cloudflare, Inc., US). The TLS certificate is issued by WE1 at DV level and valid to 2026-12-17, which confirms encryption only, not operator identity.
What to Verify Next
Any claim of an allocation should be checked against the official channels of the genuine GRVT project, reached through a source the user independently trusts, such as a known official website or a verified announcement. The user should confirm whether the project has announced an allocation or claim event at all and which domain it uses. Any claim link that was received through a message, social post, or advertisement should be treated as unconfirmed until the originating account and the sender's identity are independently authenticated. Official support channels should be confirmed offline or through the project's established presence. Evidence:
- Homepage: the domain differs from any established project domain, so legitimacy cannot be inferred from the title alone.
- Contact surface: no contact or support pathway on the page that could be tested.
Summary Verdict
The site presents a high-risk posture with confirmed adverse external intelligence and an unverified, accountability-free operator. The decisive reputational findings outweigh the technical hygiene signals, and the available evidence does not support treating the site as a legitimate allocation or claim destination.
Infrastructure Integrity
The site is served through Cloudflare's CDN and WAF, and all observed addresses are CDN edge nodes. The origin server could not be observed, so independent hosting verification is not possible and content can be changed quickly behind the edge. Valid encryption and mainstream edge protection are mitigating technical hygiene factors only. They do not offset the external threat detections and do not show that the operator is legitimate.
Closing Assessment
The site should not be used for logins, wallet connections, credential or seed-phrase entry, or any payment or asset transfer, and nothing should be downloaded from it. If it was already visited and any wallet or credential interaction took place, wallet approvals should be revoked, passwords changed, and the incident reported to the relevant platform or authorities. Any further contact should be limited to passive viewing from an isolated environment.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - Many of the responses the page received looked generated rather than served normally.Behaviour in a sandbox
rule:BEHAV_SYNTHETIC_RESPONSES_HIGH
03 Hosting and network
- The domain was registered between three and six months ago.Hosting and network
rule:DNS_YOUNG_6M
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of claim-gvrt.live.
- The request stayed on claim-gvrt.live. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-07-21. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::6815:3302 |
| Name servers | amber.ns.cloudflare.com, osmar.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-17 |
| Domain age | 0.27 years (continuous registration) |
| Domain expiry | 2027-07-21 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about claim-gvrt.live at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.