Is claims-zeal.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Claims-zeal.app is a newly registered website whose homepage is titled "Zeal | Rewards". It presents itself as a rewards or claims-style destination. The captured homepage holds only a short block of text, and the site's real-world operator and business model cannot be independently tied to any known brand or organisation.

Scam/Impersonation Risk

This site carries an elevated, clearly cautionary risk profile. It is the subject of a confirmed blacklist-grade reputation hit. Multiple independent security engines classify the domain as malicious, including several leading security vendors, and the aggregate detection level is high enough to trigger an automatic safety override. A rewards or claims proposition is a common lure pattern for credential and payment harvesting. Here it sits on a domain only a few months old with a negligible web history, so there is no record of legitimate operation to counterbalance the detections. No conflicting legal entities or named brand impersonation were observed, so this is not an identity-contradiction case. The risk comes from the external threat detections, which infrastructure protections cannot offset. Browser-behaviour testing was mostly benign: no wallet-connection prompts, clipboard manipulation, hidden forms, credential posts to third parties, or cloaking. Nearly all page resources were nonetheless loaded from external origins. The benign testing result does not reduce the weight of the detections. Evidence:

• Homepage and domain-level reputation: twelve malicious and four suspicious verdicts from security engines, including three tier-one vendors.
• Domain provenance: registered 2026-07-21 (~0.27 years old), with a single web-archive snapshot in 2026 (1 year tracked), so there is no established history.
• Homepage behaviour: three successful test runs showed no external data submission, wallet interaction, or cloaking, but about 96% of observed page resources came from external origins.

Regulatory Verification Notes

The captured homepage presents no licence, registration number, or named legal entity, and no legal or identity pages were available for assessment, so no regulatory standing can be inferred. Registration details do not disclose an identifiable operator, which leaves ownership opaque, and the operator's identity has not been independently verified. This opacity is administrative and is not an identity contradiction. It matters here only because it removes any accountable party who could be contacted about the detections. No third-party broker or regulator listing matched this domain, so no reputational signal exists from that source either way. Evidence:

• Homepage: short text content with no company name, licence, or registration disclosure.
• Domain registration: created through NICENIC International Group Co., Limited on 2026-07-21, expiring 2027-07-21.
• Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-17.

What to Verify Next

Before any interaction beyond viewing, independently establish whether the "Zeal" rewards offering exists under a recognised brand. This means checking the official website and app channels of any company the site claims to represent, reaching them through a route not supplied by this site. Any licence or registration claim should be confirmed with the relevant registry. Any reward, claim, or payout the site promises should be checked with the purported issuer directly, not through this domain. Until such confirmation exists, the site's legitimacy remains unestablished. Evidence:

• Homepage: the "Rewards" title and claims-oriented framing are the only indication of purpose and cannot be traced to a named issuer.
• Domain: the claims-zeal.app name has no archived history that could corroborate a prior legitimate identity.

Summary Verdict

The overall posture is high-risk. Strong, concurrent external threat detections on a very young, unestablished domain outweigh the benign behavioural results and the valid encryption. The evidence supports treating the site as potentially malicious until its owner demonstrates otherwise.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host could not be observed. The certificate is valid and the hosting is mainstream. These are mitigating factors only. Edge-only visibility prevents independent verification of the hosting and can mask rapid content changes. Shared infrastructure of this kind is also available to any registrant, so it does not offset the reputation findings.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any payment or financial action. Viewing it passively is the only low-exposure use, and nothing should be downloaded from it. Anyone who has already submitted information should change affected passwords and monitor the relevant accounts.