Is claim-ultiland.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at claim-ultiland.com is a minimal single-page landing site titled "Ultiland — Claim Your $ARTX Rewards." It carries only a short block of text and presents itself as a portal where visitors can claim rewards in a token called $ARTX. Its apparent purpose is a token-reward claim funnel. The page gives no operator, product documentation or corporate context.

Scam/Impersonation Risk

This is the decisive area of concern. The domain is blacklisted by external threat-intelligence sources, and a substantial cluster of security engines independently flags it as malicious, including several tier-one vendors. That convergence is strong enough to override every protective signal. A "claim your rewards" proposition on a very recently registered domain is a well-known pattern for token-reward lures, which ask visitors to take a financial or wallet-related action to receive a supposed payout. Nothing on the site validates the $ARTX reward claim or ties it to any recognised project. The sandbox observed no external network calls, wallet-drainer behaviour, clipboard manipulation, hidden forms or cloaking. That shows only that the captured page was inert during testing. It does not rule out harmful behaviour on other paths or at other times. No conflicting legal entities and no impersonation of a specific named brand were observed. The risk therefore rests on the third-party malicious-detection record, not on an identity contradiction. Evidence:

• Homepage: titled as a claim-your-$ARTX-rewards offer, with only a very short body of text and no supporting product or project information.
• Reputation: the domain is on external blacklists and is flagged malicious by a cluster of security vendors, including Fortinet, Kaspersky and Sophos.
• Behavioural testing: three successful runs recorded no external requests, no wallet-related activity and no cloaking.
• Domain provenance: registered 2026-08-04 (~0.23 years, about 83 days old), through NICENIC INTERNATIONAL GROUP CO., LIMITED. The web archive holds 1 snapshot, from 2026 (1 year tracked).

Regulatory Verification Notes

The captured homepage names no operating company, registration number, licence, jurisdiction or legal terms. That is a genuine content gap on the site itself. Ownership and governance remain opaque, and the available evidence cannot connect the site to any real-world person or organisation. No third-party regulatory or broker-reputation record matched this domain, so there is no external licensing context to offset the gap. This gap is a verification matter, not proof of wrongdoing, but here it compounds the hard reputational findings. The site's TLS certificate is valid but domain-validated only. It confirms control of the domain and says nothing about the operator. Evidence:

• Homepage: no company name, licence or registration details, and no terms, privacy or about content in the captured material.
• Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-31.
• Hosting: served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Third-party context: no matching broker or regulatory-reputation record.

What to Verify Next

Any reward or token claim should be checked against the official channels of the $ARTX project, reached independently and not through links on this site. Confirm through the project's established documentation or its listing on recognised token trackers that this domain is a sanctioned claim portal. Check whether the project has issued any statement about reward claims. Confirm any official support or contact channels offline or through a trusted route. If the domain is on a system the user manages, security teams should also treat it as a candidate for blocking, and any prior interaction with it should be reviewed. Evidence:

• Homepage: the reward offer carries no verifiable link to a named project, issuer or documentation.
• Domain provenance: the very recent registration with a single archive capture offers no prior history that could corroborate an established service.
• Reputation: the current malicious flags mean any legitimate use would need to be confirmed by the project and the flags cleared.

Summary Verdict

Available evidence places this website in an elevated-risk category. A confirmed blacklisting and widespread malicious detections outweigh its technically clean sandbox behaviour and valid certificate. The operator's identity is unknown and nothing supports the reward offer, so no legitimacy is established.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and no origin server was observable. The certificate is valid and chains to a known issuer. These are mitigating factors only, because the same protections are freely available to any registrant and cannot offset the threat detections. Edge-only visibility also prevents independent verification of the true hosting location and can mask rapid content changes. The young domain with sparse subdomain structure is an unconfirmed heuristic and is given limited weight.

Closing Assessment

Interaction should be limited to passive viewing at most. The user should not log in, connect a wallet, enter credentials, approve transactions or make any financial commitment through this site. Anyone who has already interacted with it should review their wallet permissions and account security.