Is claimvault.live a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page crypto-themed property at claimvault.live. Its homepage is titled "Dogelon Mars", after a meme-token brand, while the domain name points to a "claim vault" or token-claim service. It presents short promotional text about the token and appears intended to attract visitors to claim, collect, or engage with crypto assets. The page content is thin, and no company, product documentation, or service terms were captured.

Scam/Impersonation Risk

The assessment is clearly cautionary because the site carries a confirmed blacklist record. Multiple independent security engines classify the domain as malicious or suspicious, and a recognised tier-one security vendor is among those flagging it. This is a hard contradiction, and the site's score is capped at a critical level as a result. The mismatch between the "Dogelon Mars" homepage title and the "claimvault" domain name fits a recurring pattern in token-claim and airdrop lures. That pattern borrows a known token brand to attract holders to an unrelated domain. This is a pattern observation, and no specific brand impersonation or conflicting legal identity was confirmed. The browser behaviour test found no wallet-connection prompts, clipboard tampering, hidden forms, or cloaking, so no drainer mechanic was directly observed. The page did generate heavy outbound traffic: a large share of its external requests and form-style submissions went to destinations outside the expected, known-good set. Data leaving the page for unvetted third parties is a material concern on a site whose stated purpose is claiming assets. The page content and the reputation intelligence taken together support a high-risk reading. Evidence:

• Homepage: titled "Dogelon Mars" on a domain named claimvault.live, a token-brand and claim-service mismatch.
• Reputation checks: the domain is flagged as malicious by 5 engines and suspicious by 4 more, including a tier-one vendor, and appears on an external blacklist.
• Behaviour test (3 successful runs): 38 external XHR calls, 29 external POST requests, and 20 non-whitelisted destinations for each of those two types.
• Domain registration: registered 2026-05-30 (~0.42 years, about 5 months old). The archive holds only 8 snapshots spanning 2025–2026 (2 years tracked).

Regulatory Verification Notes

The captured homepage identifies no operating company, licence, registration number, or jurisdiction. The disclosure position on the page is unclear. Ownership is also not attributable: the domain was registered through NICENIC International Group Co., Limited with incomplete owner details, which is ownership opacity and not an identity contradiction. No legal-entity names conflict, so no identity contradiction exists. The site does not appear to hold any regulated or licensed status, and no third-party broker or regulator record was matched. The identity of the real-world operator is therefore unverified, and the site's own claims cannot stand in for verification. Evidence:

• Homepage: no company name, licence number, or registered address captured.
• Registration record: registrar NICENIC International Group Co., Limited, created 2026-05-30, expiring 2027-05-30.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE1 (domain-validated only), valid to 2026-12-24. A domain-validated certificate confirms only control of the domain, not the operator's identity.

What to Verify Next

Before any interaction, the token or project the page claims to represent should be checked at its official website, which should be reached independently through the project's verified social accounts or a trusted aggregator and not through any link from this domain. If a claim or airdrop is advertised, the project's official channels should confirm that it exists and that it is hosted at this domain. Any operator, licence, or registration claim should be checked against the relevant public registry, and official support channels should be confirmed by an independent route. The site's reputation status should be re-checked after any remediation or domain changes. Evidence:

• Homepage: a token-branded claim page whose domain does not obviously match the brand it names.
• Reputation checks: multiple security engines currently flag the domain, so a clean re-scan is the minimum bar.
• Registration record: very recent registration with no verifiable operator.

Summary Verdict

Available evidence places this website in an elevated-risk, critical-trust posture. Confirmed adverse reputation findings outweigh the otherwise unremarkable technical hygiene, and the operator remains unidentified. The site's brand and domain pairing and the volume of third-party data flows reinforce that reading and leave nothing to offset the adverse reputation record.

Infrastructure Integrity

The site sits behind a mainstream CDN/WAF, and its observed addresses are edge servers. The origin server was not observable. The transport certificate is valid and the provider is well known, which is a mitigating factor only. This infrastructure does not offset the confirmed reputation findings, and edge-only visibility makes it impossible to verify the real hosting or to detect rapid content swaps behind the proxy.

Closing Assessment

Limit any interaction with this site to passive viewing. Do not connect wallets, enter credentials, sign transactions, or make payments or deposits through it. Any asset claim should be pursued only through the project's independently verified official channels. Anyone who has already interacted with the site should review wallet permissions and change exposed credentials.