Is claim-solrewards.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a single-page site on a free Vercel-hosted subdomain, titled "Blockchain Rectification and Rewards". Its domain name, "claim-solrewards", points to a cryptocurrency reward-claim offer, apparently aimed at Solana users. It presents a short page of text and no other observable pages. Its apparent purpose is to draw visitors into claiming or "rectifying" blockchain rewards.

Scam/Impersonation Risk

This site has confirmed adverse third-party detections, and the pattern is strongly cautionary. A large cluster of independent security engines currently flags the domain as malicious, including two tier-one vendors, with a further engine rating it suspicious. This is a confirmed blacklisting, and it is the decisive factor in the assessment. The domain name and page title also follow a reward-claim lure pattern. Reward-claim pages are a common route to wallet-connection prompts and seed-phrase or credential harvesting. No wallet-connection prompt, clipboard manipulation or hidden form was observed in the sandbox runs, and no content cloaking was detected. The page may therefore be dormant, serving benign content to the automated sandbox, or its harmful behavior may be gated behind interactions the sandbox did not trigger. The sandbox result does not offset the blacklisting. A related abuse signal, 90 reports against the shared Vercel infrastructure address, is attributed to a multi-tenant network and is discounted. It is not evidence about this site. The domain also closely resembles the hosting platform's own namespace, which makes it easy to mistake for a platform-official page. No conflicting legal entities were observed, because no legal entity is presented at all. Evidence:

• Homepage and domain: the reward-claim wording in the hostname and page title matches a recognizable lure pattern, and the site sits on a free subdomain of a shared hosting platform.
• External reputation: 15 security engines rate the domain malicious and 1 rates it suspicious, enough to trigger an automatic critical-risk cap.
• Sandbox behavior (homepage, 3 runs, all successful): no external requests, no wallet-provider interaction and no cloaking were observed, so any harmful logic was not exercised in testing.
• Shared-infrastructure reports: 90 abuse reports on a Content Delivery Network address operated by Vercel were discounted as shared-provider noise.

Regulatory Verification Notes

The site gives no identifiable operator, company name, registration number or licensing information that could be checked. Operator identity could not be independently connected to any real-world person or brand. Any reward-distribution, token-claim or "rectification" service would normally sit within financial-services or digital-asset oversight, and nothing here shows such status. This is a disclosure gap and cannot be treated as proof of fraud, but it removes any accountability that might otherwise soften the blacklisting. No broker-reputation database entry matched the domain. Hosting is on mainstream cloud infrastructure and the site uses valid transport encryption. These facts show only that the site is technically well-formed. They do not show that it is legitimate, because encryption of this kind is freely available to malicious operators. Evidence:

• Homepage: roughly 4,600 characters of text were captured, with no legal entity, licence reference or registered address identified.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US), registry ARIN.
• Transport encryption: TLS certificate issued by WR1 (domain-validated only, which confirms control of the domain and nothing about the operator), valid to 2026-11-27 with 31 days remaining.
• Third-party broker database: no match, so no external regulatory or reputational record exists to corroborate the site.

What to Verify Next

Because of the confirmed adverse detections, the first step is to avoid the site and not follow it from any message, social post or airdrop notice. Anyone who reached it through such a link should check the original sender's legitimacy through an independent, offline route. Any real reward or claim program should be confirmed on the official channels of the token project or wallet provider involved, reached by typing the known address directly or using a bookmark. Anyone who already connected a wallet or entered recovery material should treat it as potentially exposed. They should review and revoke token approvals and move assets to a fresh wallet. Financial and token activity should also be reviewed for unexplained transfers. If a business needs to engage with the operator, it should demand verifiable corporate and licensing details through official registries before any interaction. Evidence:

• Homepage and domain: the reward-claim framing is the specific lure that official-channel confirmation can rule out.
• Sandbox behavior: the absence of wallet prompts in testing does not exclude gated or delayed prompts, so wallet-permission review remains relevant after any exposure.
• Operator identity: no verifiable operator was identified, so no legitimate counterparty is available to contact.

Summary Verdict

The site is rated at a critical level of trust and presents an elevated risk. Confirmed multi-engine malicious detections are decisive, and nothing observed offsets them. The baseline technical hygiene is routine and does not indicate legitimacy. Identity could not be verified, and the combined evidence supports a high-risk classification for any sensitive interaction.

Infrastructure Integrity

The site is delivered through Amazon-operated cloud infrastructure behind CDN edge servers. All observed addresses are edge nodes and the origin server was not observable, so hosting cannot be verified independently, and content could be swapped without detection. The shared-platform network is a mild mitigating factor, because it shows the site is not on bespoke attacker-run servers. It does not reduce the reputation risk.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction. Any visit should be limited to read-only inspection from an isolated environment, and nothing should be downloaded or signed. If this link was received unsolicited, it should be reported to the platform or channel that delivered it, and to the hosting provider's abuse team.

Signals weighed against the site

• AbuseIPDB: 90 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.