Is claim-stargrace.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page destination on a free shared-hosting subdomain of a developer deployment platform. Its name, "claim-stargrace", points to a reward- or token-claim offering. When analysed, the homepage returned only a very short block of text. In place of the site's own content, a security-challenge page labelled as a suspected-phishing warning was served. The site's apparent purpose is therefore a claim or giveaway-style landing page of unconfirmed business model, and its real content was not retrievable.

Scam/Impersonation Risk

This site presents confirmed adverse reputation signals. Multiple independent security engines classify it as malicious. Several of these are tier-one vendors, and the detection volume alone places the site on a blacklist. The homepage itself, when fetched, returned an access-denied response carrying a platform-issued "suspected phishing" warning. That is consistent with the external detections and indicates the hosting platform's own abuse controls have flagged the deployment. The name "claim-stargrace" follows a pattern commonly used in reward-claim lures, which are typically built to coax visitors into connecting wallets, entering credentials, or paying "fees" to release a payout. The captured content was too sparse to show which mechanism, if any, this site uses, so that is an inference from naming and reputation rather than an observed fact. In the automated browsing sessions, no wallet-connection prompts, clipboard manipulation, hidden forms, or credential posts to external destinations were observed. Network calls to third-party destinations were frequent but all matched known benign services, and the page produced a notable number of script errors. These observations slightly temper the picture but do not offset the confirmed blacklist status. No conflicting legal identities were found, because no identity content was captured. Evidence:

• Homepage: access was refused with a bot-challenge response, and the page title read as a suspected-phishing warning.
• Reputation: ten security engines rated the domain malicious and one rated it suspicious, including three major tier-one vendors, so a critical blacklist threshold was reached.
• Behavioural sessions (3 of 3 completed): no wallet-connect, clipboard-write, hidden-form or external password-form activity. Seventeen console errors and 22 third-party XHR/fetch calls were recorded, none to non-whitelisted destinations.

Regulatory Verification Notes

No licensing, registration number, company name, or legal terms could be assessed, because the only content retrieved was the platform challenge page rather than any legal or about page. No third-party broker or regulator record matches this site, and no regulated-entity status is established. The site's real-world operator therefore remains unconnected to any identifiable person or organisation. Transport security is valid but is only a domain-validated certificate. It confirms an encrypted connection and says nothing about who runs the site or whether it is honest. Evidence:

• Technical hosting: served from AS13335 (Cloudflare, Inc., US), registry ARIN.
• TLS: certificate issued by WE1, domain-validated (DV), valid to 2027-01-05.
• Broker and regulatory databases: no match for this domain or name, so no regulatory standing is established.

What to Verify Next

Any prospective interaction should begin with the party that referred the visitor to this address. The invitation, message, or advertisement should be traced back to the brand it claims to represent through that brand's officially published channels, reached independently of any link supplied. A brand's own verified website should be checked for any genuine "claim" programme before any interaction with this domain. If the site is meant to represent a known project or company, the project's official announcement channels should confirm or deny it. Suspected abuse of the shared-hosting subdomain can be reported to the hosting platform's abuse desk and to the brand being referenced. Evidence:

• Homepage: the platform's own suspected-phishing interstitial replaced the site content, so no on-site claim could be validated.
• Domain naming: the claim-oriented name sits under a shared-hosting parent domain rather than a dedicated, brand-owned domain.

Summary Verdict

The overall posture is high-risk and clearly cautionary. External security detections are decisive, and no legitimacy evidence, however favourable, can offset them. Technical hygiene such as valid encryption and a mainstream hosting network is routine on malicious sites. It does not indicate trustworthiness, and the operator's identity is entirely unestablished. The site is suitable for read-only observation at most.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web-application firewall. All four observed addresses are Cloudflare edge servers, and the origin server was not observable. This is a mitigating factor only, since it indicates the domain is not hosted on bulletproof or anonymous infrastructure. It also prevents independent confirmation of where the content is actually served from. Edge-only visibility can mask rapid content swaps, so what is served may change without notice. Protective infrastructure cannot counter the reputation risk established by the external detections.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any payment or financial transaction. Nothing should be downloaded from it. Anyone who has already interacted with it should change any exposed passwords, revoke any wallet approvals granted, and monitor their financial accounts.