Is midenclaim.pages.dev a scam? TrustSniffer's high-risk assessment: 21/100

Overview

This website is a single-page site hosted as a subdomain on a shared web-publishing platform. Its page title is simply "wallet", and its domain name suggests a "claim" function. It presents a short, text-light landing page of roughly one screen of copy. Its apparent purpose is to steer visitors into a wallet-related claim or connection flow, though page analysis could not independently establish who operates it or what it offers.

Scam/Impersonation Risk

Confirmed contradictory signals are present. The domain is on an external blacklist, and threat-intelligence sources currently flag it with both malicious and suspicious detections. Reputation records also associate the domain with known phishing activity. No conflicting legal identities and no specific brand impersonation were identified, so the concern rests on the reputational evidence rather than on identity contradictions. The domain is a free subdomain on a shared publishing platform rather than a standalone registered domain. Its "claim" naming and the generic "wallet" page title match a common lure pattern for credential and asset-harvesting pages, and that pattern is an observation, not a proven intent. Behavioural testing of the homepage showed no wallet-connection prompts, clipboard tampering, hidden forms, or content cloaking. It did record heavy background traffic to external services and a data submission to one destination outside the platform's usual trusted set. That is consistent with third-party data collection and cannot be dismissed given the blacklist status. The absence of an overt drainer in the test runs does not offset the external threat detections. Evidence:

• Homepage: the page title is only "wallet", and the visible text is about 1,100 characters. It gives no company, product, or contact detail.
• External reputation: one malicious and two suspicious verdicts were recorded against the domain, and the domain is blacklisted.
• Homepage behaviour: 70 external background requests across 3 test runs, and 3 external form submissions, one to a non-whitelisted destination.
• Interaction testing: no wallet-provider detection, drainer behaviour, clipboard writes, or hidden forms were observed.

Regulatory Verification Notes

The captured page carries no identifiable operator, legal entity, licence, or registration, and no legal or terms pages were available for assessment. Because the site's purpose centres on a wallet, those missing disclosures matter more than they would elsewhere. Registration details for the domain are incomplete, which is an administrative limitation and not an identity contradiction. No regulator-sourced or broker-database record matches this site, and no third-party broker warning exists. The cautionary posture therefore rests on the threat detections, not on the missing disclosures. The site's real-world operator has not been independently established. Evidence:

• Homepage: no company name, licence number, jurisdiction, or physical address is published.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-16. A DV certificate confirms control of the domain, not the operator's identity.
• Third-party broker dataset: no match.

What to Verify Next

Any interaction should first be preceded by an independent check of whether the claimed service exists. Confirm the offer through the official website or verified social channels of the project the page appears to refer to, reached through a trusted route and not through any link that led to this page. Confirm the official support and contact channels the same way. Check the origin of the link, message, or advertisement that directed the visitor here. Treat an unsolicited "claim" prompt as unconfirmed until the issuing project confirms it. If a visitor has already interacted with the site, review and revoke wallet permissions and change any credentials entered. Evidence:

• Homepage: it names no verifiable issuing project, so the offer cannot be authenticated from the page.
• Domain structure: it is a subdomain on a shared publishing platform, so no standalone domain registration ties it to a named organisation.
• Page behaviour: one outbound submission went to a destination outside the platform's usual trusted set.

Summary Verdict

The site carries an elevated-risk posture. Confirmed adverse threat-intelligence findings are decisive, and the identity of the operator remains unverified. The technical hygiene of the site and the clean results from interaction testing do not outweigh the external reputation evidence.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall, and all observed addresses are CDN edge servers, so the origin server is not observable. The edge-only visibility prevents independent hosting verification and can mask rapid content swaps. The valid TLS certificate and reputable network provider are mitigating signals only. Shared platform infrastructure is used by legitimate and malicious sites alike, so it does not offset the reputation risk.

Closing Assessment

Prospective users should treat the site as unsafe for login, wallet connection, credential entry, or any financial interaction. Viewing it passively in an isolated browser is the most that is reasonable, and nothing should be signed, approved, or downloaded from it.