Is reward-claim-drop.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Google, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a subdomain on a free, shared web-hosting platform. It currently serves only the platform's default "Site not found" error page. That page tells the visitor that a broken link was followed and invites them to build their own site. It shows no products, pricing, forms, claims or links, so no business model is observable. The page looks like an unclaimed, removed or misconfigured deployment. The hostname, however, is worded like a reward-claim promotion.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Multiple major security vendors currently flag this hostname as malicious. A leading browser-safety service has classified it under its social-engineering category, which covers deceptive and phishing-style pages. Together these amount to a confirmed blacklist condition. No conflicting legal identities were found, and phishing or brand impersonation is not confirmed on the visible page. The name "reward-claim-drop" matches the lure vocabulary of prize and giveaway scams. A benign-looking error page can also hide a different payload, because a harmless landing page is what a scheme would show to scanners or to visitors who arrive without the expected link. The automated browser sessions support this concern. Every session detected concealed forms, including password-type fields, that are not visible in the rendered page text. The page also made a very heavy volume of external network requests and underwent a very large number of DOM changes after interaction. The lookalike analysis also noted a close textual resemblance to the hosting platform's own domain. That resemblance reflects the page's default hosting template and is not treated as confirmed impersonation. Abuse reports against one of the shared edge addresses are discounted, because that address is shared provider infrastructure and the reports do not reliably relate to this site. Evidence:

• Homepage: the visible content is only the default hosting 404 notice, with no forms, links or services described.
• Behavioral sandbox, all three sessions: concealed forms with password inputs were detected, with roughly 99.6% of network traffic going to external destinations and thousands of DOM mutations after interaction.
• Reputation checks: eleven security engines returned malicious verdicts, including a major browser-safety service's social-engineering classification.
• Hosting edge address: two abuse reports were recorded against a shared CDN address and are discounted as shared-infrastructure noise.

Regulatory Verification Notes

The site carries no legal, terms, privacy or about content. It names no operating entity, registration number, licence or regulator, and nothing on the page connects the hostname to a real-world business or person. Ownership and governance are therefore opaque, which is an administrative and verification gap rather than an identity contradiction. No third-party broker or regulatory record matched this site. The transport certificate is technically valid and organisation-validated, but it is issued to the hosting platform and not to the site's operator. It therefore confirms encrypted transport only and says nothing about who runs the site or whether it is legitimate. Evidence:

• Homepage: contains no operator name, licence disclosure or contact details.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US) behind the hosting platform's delivery layer.
• Transport encryption: TLS certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV validation) to Netlify, Inc, valid to 2027-03-19.
• Third-party broker dataset: no matching record.

What to Verify Next

Any message, advertisement or link that directed a visitor to this address should be traced back to its sender before anyone acts on it. The claimed sender should be contacted through a channel obtained independently, such as the official website typed manually or a published phone number. Anyone who already entered credentials, payment details or wallet information on this hostname should treat those details as exposed. They should change the affected passwords from a clean device, enable multi-factor authentication, and notify their bank or payment provider if financial data was shared. If the address belongs to the user's own project, the owner should audit the deployment, remove any unrecognised forms or scripts, and request a security review once the content is clean. Evidence:

• Hostname wording: the reward-claim naming implies an inbound promotional link as the likely route by which visitors arrive.
• Sandbox findings: the concealed password-type forms are the specific data-capture risk to check for on any live version of this site.
• Homepage: shows no official contact channel to validate, so confirmation has to come from the claimed sender's own published channels.

Summary Verdict

The assessment is critical and the posture is clearly cautionary. Independent security detections outweigh the technically valid encryption, and the operator remains unidentified and unverified. Evidence of hidden data-capture behaviour reinforces that conclusion. The site cannot be treated as legitimate or safe for any sensitive interaction.

Infrastructure Integrity

The site is delivered through the hosting platform's cloud network. All four observed addresses belong to shared edge infrastructure, and the origin server was not observable. A reputable provider and a valid certificate are mitigating factors only. The threat detections above are not offset by them, and this shared platform hosts large numbers of unrelated sites.

Closing Assessment

Do not enter credentials, personal data, payment details or wallet connections on this site, and do not follow any prompts to claim rewards. If the address arrived in a message or advertisement, treat that message as hostile and report it to the platform or to the hosting provider's abuse channel.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.