Is claimcashcat-0qn.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at claimcashcat-0qn.live presents no content of its own to visitors. The captured page is a security interstitial headed "Suspected Phishing", which states that the site has been reported for potential phishing and offers an "Ignore & Proceed" button. No products, pricing, payment flow, company description or service offering is visible, so the business model cannot be determined. The domain name suggests a "claim cash" style promotion, but that is an inference from the name and not something the site states.

Scam/Impersonation Risk

The site carries an elevated, clearly cautionary risk profile. It is blacklisted by external threat intelligence, with a large number of independent security engines flagging it as malicious, including several tier-one security vendors. The page shown to visitors is a phishing warning, which means the destination is already treated as hostile by protective infrastructure. No brand impersonation was detected and no conflicting legal identities appear, because there are no identity pages to compare. The risk therefore rests on the reputation findings, not on identity contradictions. The interstitial contains no login form, hidden form or wallet-connection logic, so no credential-harvesting mechanism was observed. That reflects the blocked capture, not proof of safety, and the site's reputation says the underlying content is the concern. Repeated external requests and a large number of page changes after interaction were also recorded. The site's own tooling classed these as benign, but they are consistent with a heavily scripted, access-gated destination. The very recent registration, together with the absence of any visible service description, matches the profile of a short-lived campaign domain used for lure or claim-style schemes. This profile is an inference and not a confirmed scam. Evidence:

• Homepage: the captured page is a phishing-warning interstitial with an "Ignore & Proceed" option, and no underlying site content was retrievable.
• Domain provenance: registered 2026-09-21 (~0.08 years, about 30 days old); the web archive holds only 2 snapshots, both from 2026-09-22.
• External reputation: 17 malicious and 1 suspicious detections, including three tier-one security vendors.
• Homepage behavior: 3 sandbox runs showed no wallet-drainer, clipboard-hijack or password-form activity on the captured page.

Regulatory Verification Notes

The site discloses no company name, legal entity, licence, registration number, address or contact channel, because only a warning screen was captured. The site makes no licensing claim, and none can be verified. Domain registration details do not identify an operator, so ownership is opaque. This is an ownership-opacity condition, not an identity contradiction. No third-party broker or regulatory-database match was found for the site. This absence is neutral and gives no regulatory assurance. The domain was registered through NICENIC International Group Co., Limited, a registrar with no connection to any identified operator. Because the domain is new and the evidence is thin, none of the site's real-world identity can be independently connected to a brand or person. Evidence:

• Legal and contact pages: none were captured, and the homepage content offers no entity name, licence or address.
• Registration: domain created 2026-09-21 and set to expire 2027-09-21 through NICENIC International Group Co., Limited.
• Hosting and encryption: served from AS13335 (Cloudflare, Inc., US); TLS certificate is Domain Validated, issued by YE1, valid to 2026-12-20. This confirms encryption only and says nothing about the operator.

What to Verify Next

The priority is to avoid interacting with the site, not to complete verification. Anyone who received a link to this domain, for example by message, email or advertisement, should confirm through an independent route that the sender is genuine. The route should be the official website or phone number of the organisation the link claims to represent, never contact details taken from the link itself. If a licence or regulated status is ever claimed for the operator, it should be checked directly in the relevant public registry. The site should be rechecked only after the warning is lifted and the external flags are resolved. Official support or contact channels should be confirmed by an offline or independent means before any reliance on the site. Evidence:

• Homepage: the interstitial's "Ignore & Proceed" option is the only interactive element and bypasses the protective warning.
• Domain age: the domain is roughly a month old, so there is no long-standing operating track record to rely on.
• Reputation: the large number of independent malicious detections indicates the flags are unlikely to be a single-source error.

Summary Verdict

The overall posture is one of high risk. Convergent external threat detections, a very recently created domain and an absence of any verifiable content or operator identity outweigh the technically valid encryption and mainstream hosting. The site cannot be treated as trustworthy on the available evidence. Its reputation is the decisive factor.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall. All four observed addresses are Cloudflare edge servers, and the origin server was not observable. This gives only limited independent hosting verification. The protection is a mitigating factor and not evidence of legitimacy, and it cannot offset the reputation findings. The edge network is also the source of the phishing interstitial, which suggests the platform itself has flagged the domain.

Closing Assessment

The site should not be used for login, credential entry, payments or any financial activity, and it should not be opened beyond viewing the warning. Any link to it should be treated as untrusted until the external flags are cleared and the operator can be identified through independent means.