Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
freeclaude.dev shows high-risk / scam indicators.
| What this site appears to be | This is a pump.fun token page for The Black Bull (ANSEM), a Solana memecoin. It shows market cap of about $100.57M, a 24h volume of $2.60M, an all-time high of $449.96M, a live chart, and a livestream with chat. Trading requires login, and the page makes no return promises. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 6 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website presented at this domain is a single-page cryptocurrency trading view for a Solana memecoin called "The Black Bull" (ticker ANSEM). The page is laid out like a pump.fun token page. It shows a live market-capitalisation chart, price and volume statistics, a stream of previous livestream clips, and a live chat panel. It also carries prompts to create a coin, log in to trade, and install a mobile app. Its apparent purpose is to funnel visitors into login-gated speculative token trading on a token-launchpad model that earns from trading and platform fees.
Scam/Impersonation Risk
This assessment is clearly cautionary. Contradictory signals are present: the domain is blacklisted by several independent reputation sources. Multiple security engines classify it as malicious or suspicious, including two tier-one vendors, and no clean reputation offsets this. The domain name has no visible relationship to the content it serves. A page styled as a pump.fun token market is delivered from a recently registered domain that does not obviously belong to that platform. No formal brand-impersonation finding was recorded, and no conflicting legal identities were found, but the mismatch is consistent with look-alike hosting and is a reason for heightened concern. The homepage content is that of a high-volatility memecoin. It shows a market capitalisation of roughly $100 million against an all-time high of roughly $450 million, which points to a sharp drawdown. It offers no project fundamentals, and it gates trading behind login. The live chat reads like pump-and-dump talk, with messages such as "U should sell now" and "dev is a whale". The page makes no yield or return promises. Behavioural testing found no wallet-drainer activity, clipboard hijacking, hidden forms or credential-harvesting forms, so the risk here comes from the reputation findings and the context rather than from observed malicious code. Evidence:
- Homepage: the market view for ANSEM shows a market cap of about $100.57M, a 24h volume of about $2.60M and an all-time high of about $449.96M, with trading available only after login.
- Homepage chat panel: messages such as "U should sell now" and "dev is a whale" indicate speculative, pump-and-dump-style discussion with no verifiable fundamentals.
- Domain provenance: registered 2026-05-04 (about 0.46 years old). The web archive holds 1 snapshot, captured in 2026, so there is no meaningful independent history.
- Reputation checks: 6 engines flag the domain as malicious and 3 as suspicious, and the aggregate result is a confirmed external blacklist.
Regulatory Verification Notes
The homepage discloses no legal entity, operator, licence, registration number or jurisdiction. The page has no visible terms, privacy or about content that would tie it to an accountable party, and the operator behind the domain remains unidentified. A token-trading and creation service of this kind handles customer funds and would ordinarily be expected to state its regulatory position. This is a verification gap and not evidence of fraud in itself, but it combines with the reputational findings above. No third-party broker or regulatory-database entry matched this site, so there is no external regulatory standing to rely on. Evidence:
- Homepage: no licence authority, licence number, company name or registered address is displayed.
- Registration: the domain is registered through Dynadot LLC., with a creation date of 2026-05-04 and an expiry of 2027-05-04.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-11-25.
What to Verify Next
Before any engagement, confirm through the official pump.fun channels, reached independently and not through this site, whether this domain is an authorised property of that platform. Check whether the ANSEM token has a legitimate listing on its official venue. Establish the operator's legal identity and any licensing for custodial or trading services through the relevant financial regulator's public registry. Official support and contact channels should be taken from an independent source and not from this page. Request a fresh independent reputation re-check after the owner or hosting side has had time to respond. Evidence:
- Homepage: the page presents pump.fun branding and navigation (Home, Livestreams, Terminal, Chat, Support, Create coin) on a domain with no evident connection to that platform.
- Homepage: login-gated trading means any credential or wallet interaction would occur on an unverified domain.
- Domain history: only a single archive capture exists, from 2026-10-09, so there is no earlier snapshot record to compare against.
Summary Verdict
The site sits in an elevated-risk posture. Confirmed adverse reputation findings from independent sources dominate the assessment and outweigh the page's otherwise benign behaviour, so a favourable reading is not supported. Its legitimacy cannot be established, and its operator cannot be linked to any accountable real-world entity.
Infrastructure Integrity
The site is fronted by Cloudflare, a mainstream CDN and WAF provider, and its IP addresses resolve only to CDN edge servers. The true origin server is not observable. This is a mitigating factor that shows ordinary hosting hygiene. It does not offset the reputation findings. Edge-only visibility also prevents independent verification of where the content is actually hosted, and it can mask rapid content swaps.
Closing Assessment
Account login, credential entry, wallet connection and any financial transaction on this domain should be avoided. At most, the page should be viewed read-only, and only from a hardened or isolated browser environment. Any funds or tokens should be handled solely through a platform address obtained from an independently confirmed official source. Organisations should consider blocking the domain pending a clean re-assessment.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
6 findings contributed to this verdict, raised by governance, external reputation, hosting and network, history in the web archive, page content, registration and ownership.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
05 Page content
- The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
06 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of freeclaude.dev.
- The request stayed on freeclaude.dev. It was not redirected to another domain. Clear
- Registration is published under Dynadot LLC.. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-05-04. Noted
- The earliest public archive of this site is from 2026-10-09. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Dynadot LLC. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3033::6815:2eb0 |
| Name servers | galilea.ns.cloudflare.com, weston.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-11-25 |
| Domain age | 0.46 years (continuous registration) |
| Domain expiry | 2027-05-04 |
| Archive first seen | 2026-10-09 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about freeclaude.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.