Is claim-pharos.com a scam? TrustSniffer's high-risk assessment: 5/100

Overview

This website, claim-pharos.com, is a very recently registered domain whose homepage currently returns only a minimal "404 Not Found" placeholder, with essentially no readable content. It shows no products, brand narrative, or stated business model. Its apparent purpose cannot be determined from what it publishes, and the name's "claim" wording does not match any content actually shown to visitors.

Scam/Impersonation Risk

The site carries a confirmed blacklist listing. Several independent reputation sources flag the domain as malicious or suspicious, and an additional external blacklist source agrees, so the contradiction rests on corroborated third-party detections rather than a single source. The same reputation checks also associate the domain with known phishing activity, which weighs heavily given how young the domain is. The domain is only weeks old, its web-archive footprint is thin, and its DNS profile shows few subdomains. That pattern is typical of disposable infrastructure stood up for short-lived campaigns, and the homepage's empty 404 state could mean a lure page that is not currently serving content. No conflicting legal identities and no explicit brand impersonation were observed on the page, but with no content to inspect, their absence offers little reassurance. In behavioral testing the page made no external network calls, no wallet-connection or clipboard activity, and no cloaking. That is a neutral finding that cannot offset the external detections, because a dormant page can be activated later. Credential entry, wallet connection, and any payment or claim-style interaction are unsafe here. Evidence:

• Homepage: returns a "404 Not Found" page with only a few characters of text and no navigation, products, or legal pages.
• Domain registration: registered 2026-09-10 (~0.12 years old, about six weeks).
• Web archive: 4 snapshots, all in 2026, from 2026-09-10 to 2026-09-22 (1 year tracked), showing a very short and sparse history.
• Reputation checks: three engines rated the domain malicious and two suspicious, and the external blacklist corroborates this.

Regulatory Verification Notes

The site publishes no terms, privacy policy, about page, licensing statement, or corporate registration details, so nothing on it supports any regulated or professional status. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com to a named individual with no organization listed. This does not link the site to any real-world brand or business, and the operator's identity is unverified. No third-party broker or regulatory-database record was matched. This is a verification note, not a verdict, and the decisive concern here is the reputation evidence above, not the absence of disclosures. Evidence:

• Homepage: no company name, license number, registry reference, or legal pages are displayed.
• Registration record: registrar PDR Ltd. d/b/a PublicDomainRegistry.com; registrant is an individual, organization field "N/A"; expires 2027-09-10.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-09; domain-validated certificates confirm only control of the domain, not the operator's identity.

What to Verify Next

Before any engagement, a prospective user should independently establish whether any real organization claims this domain, using an official channel reached from a source other than this site. If the domain was received in a message, advertisement, or social post, the sender's authenticity should be confirmed through a separate route. Any claimed license or registration should be checked directly with the relevant regulator's public register, and the official contact channels of the supposed brand should be confirmed independently. If the domain is part of an organization's own estate, its owner should review the reputation flags and the page state with their hosting and security teams. Evidence:

• Homepage: no claimed brand, regulator, or contact route is offered for checking, so verification must start from the original referral source.
• Domain registration: the six-week-old registration means no long-standing public record exists to corroborate it.
• Reputation checks: current detections should be re-checked against the major reputation lists after any remediation.

Summary Verdict

The overall posture is high risk. Corroborated blacklist detections combined with a newly created domain, a thin history, and a blank landing page outweigh the technically sound protocol hygiene. The operator's real-world identity remains unverified, and the site should be treated as a hazardous destination until the detections are cleared.

Infrastructure Integrity

The site sits behind a mainstream CDN and WAF provider, and all observed addresses are edge nodes, with the origin server not observable. This protective layer is a mild mitigating factor. It also prevents independent verification of where the content is actually hosted and allows content to be swapped quickly behind a stable edge address. A valid TLS certificate is in place, but it neither offsets the external threat detections nor establishes legitimacy.

Closing Assessment

The domain should be treated as unsafe for login, credential entry, wallet connection, or any financial interaction, and at most viewed passively from an isolated environment. Anyone who received a link to it should not act on that message, and should report it to the relevant security team or the impersonated organization if one is claimed.