Is claimequilibria.xyz a scam? TrustSniffer's high-risk assessment: 2/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The site claimequilibria.xyz is a single-page web property titled "Claim" that shows a visitor almost no readable content. The only text captured is a few dozen characters behind an automated-access challenge, and it names no product, operator, or service. The domain and title suggest a claim-style landing page, but the page does not state its purpose or business model.

Scam/Impersonation Risk

This is the decisive area of the assessment. Contradictory signals are present: the domain appears on an external blacklist, and a major security vendor classifies it as malicious while several other engines mark it suspicious. The detections are not attributed to a specific threat category, so they are not a confirmed finding of phishing or brand impersonation. No conflicting legal identities appear, because the page presents none. Even so, a confirmed blacklist listing on a very recently created domain is a strong adverse combination, and infrastructure protections cannot offset it. Behavioural testing of the homepage showed nearly all network activity going to external destinations, though none to non-recognised hosts. The page also produced repeated script errors and no wallet-connection or credential-harvesting behaviour. That limits the observable harm but does not clear the listing. A page that says only "Claim" and gates access can be a staging point for later onboarding or credential flows, so it is treated as a live risk. Evidence:

• Homepage: it exposes a single "Claim" title with minimal text and no stated operator, product, or terms.
• Reputation: the domain is on an external blacklist, and a tier-one security vendor flags it as malicious, with additional suspicious verdicts from other engines.
• Domain provenance: registered 2026-08-15 (~0.19 years old, about 71 days) through NICENIC INTERNATIONAL GROUP CO., LIMITED, expiring 2027-08-15.
• Homepage behaviour: nine console errors were logged across three successful runs, and about 97.6% of network activity was external.

Regulatory Verification Notes

No legal, licensing, or registration information is available on the captured page. It names no operating company, contact route, privacy policy, or terms. Because the page is almost empty, this is a real content gap, but the adverse reputation findings are what drive the verdict, not this gap. No regulator-linked source and no third-party broker record connect the domain to any regulated entity. The operator's real-world identity is therefore unverified, and nothing here supports treating the site as a licensed or accountable service. The technical profile is only a weak mitigant: the site has a valid certificate and responds consistently, but a certificate shows only that the connection is encrypted. Evidence:

• Homepage: it contains no company name, license number, jurisdiction, or legal pages.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: the TLS certificate was issued by WE1 at domain-validated (DV) level, valid to 2027-01-12.
• Third-party broker data: no broker or regulatory record matched this domain.

What to Verify Next

Treat the domain as untrusted until the listing is explained. First, find out which specific category the flagging vendor assigned and whether it has been reviewed or delisted. Second, if the domain reached the user through a message, advertisement, or social post, trace that source and confirm independently that the claimed sender actually published the link. Third, check whether any organisation that supposedly offers a "claim" has officially published this domain, using an independent route such as the organisation's own known website or verified channels. Finally, confirm any operator or support contact through a route that does not depend on this site. Evidence:

• Reputation: the adverse listing is unattributed to a threat category, so the category determines how serious the risk is.
• Homepage: it has no content that independently ties the domain to a named organisation or programme.
• Domain provenance: the domain is only weeks old, so no earlier legitimate use establishes a track record.

Summary Verdict

The overall posture is elevated risk. A confirmed external blacklist listing on a newly created, content-free domain with no verifiable operator outweighs the site's basic technical hygiene. The evidence points to a site that should be treated as potentially harmful, and the operator's identity and intent remain unestablished.

Infrastructure Integrity

The domain resolves entirely to Cloudflare edge servers, and the origin host is not observable, so the actual hosting location cannot be independently checked. This arrangement protects the site against denial-of-service and automated probing, but it also conceals the underlying server and lets content change quickly without a visible hosting trail. It is a mitigating factor only and does not offset the reputation findings. The reputation of the shared network is clean and the browser-facing certificate is valid, so the exposure here concerns accountability rather than infrastructure compromise.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, payment, or any financial or onboarding step, and nothing should be downloaded from it. Anyone who has already interacted with it should change reused passwords and review connected accounts. The domain should be reported to the relevant security channel if it arrived through an unsolicited message.