Is zealclaim.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, served from a recently registered web-application domain, presents a homepage titled "Treasure | Deep Data Intelligence". It uses data-intelligence branding and carries a substantial amount of text. The material reviewed does not establish its commercial purpose or business model, and the brand name shown on the page differs from the name in the domain.

Scam/Impersonation Risk

Contradictory signals are present, and they are serious. Several major security engines currently flag the domain as malicious, and two of the most widely relied-upon engines are among them. That convergence meets the threshold for a confirmed blacklisting, and it overrides every mitigating technical attribute of the site. The domain is also very young and has almost no independent history. A newly created domain carrying an active threat listing is a pattern typical of disposable infrastructure used for fraud or malware delivery. No conflicting legal-entity names and no brand-impersonation content were observed in the page evidence, and no phishing form was captured. The browser-behaviour testing was clean: it showed no external data submissions, no wallet-drainer or clipboard-manipulation activity, no hidden forms, and no cloaking. These are mitigating observations. They do not offset an active external threat listing, because malicious behaviour can be introduced or switched on after a page has been analysed. Evidence:

• Homepage, external reputation: ten malicious and four suspicious verdicts from external security engines, including two top-tier engines, and the domain is treated as blacklisted.
• Domain provenance: registered 21 July 2026 (about 0.27 years old), expiring July 2027.
• Archive depth: 1 archive snapshot, all dated 26 July 2026 (1 year tracked), so there is no meaningful prior history.
• Homepage behaviour: three successful sandbox runs with stable responses and no outbound data transmission.

Regulatory Verification Notes

The material reviewed contains no licensing, registration or legal-entity information that could be assessed, so no regulated status can be credited to the operator. The registrar of record is NICENIC International Group Co., Limited. A third-party broker database returned no match, which neither supports nor counts against the site. The cautionary posture rests on the active threat listing, not on any licensing question. The site's transport encryption is valid, but a basic domain-validated certificate shows only control of the domain, not the operator's identity or good faith. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 17 December 2026.
• Registrar: registration handled through NICENIC International Group Co., Limited, created 21 July 2026.

What to Verify Next

Before any engagement, the threat listings should be re-checked directly with independent reputation services to see whether they persist or have been remediated. If the site is later shown to be compromised rather than malicious by design, the operator should be contacted through an independent channel. The relationship between the "Treasure" brand and this domain name should be established through sources outside the site. Any claim of financial, custodial or regulated services should be checked against the relevant official registry. Support channels should be confirmed independently of the site. Evidence:

• Homepage: the visible brand is "Treasure" while the domain reads "zealclaim", so the link between the two names is unestablished.
• Homepage: no regulator or registry reference in the reviewed material can be checked against an official register.

Summary Verdict

The site sits in a critical-risk posture. A confirmed external threat listing, combined with a domain only months old and no established track record, outweighs the technically clean page behaviour. The operator's real-world identity is unverified, and the available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are CDN edge nodes. The origin server was not observable, so hosting cannot be independently attributed to the operator. This protection is a mitigating factor for availability and basic transport security only. It says nothing about the intent of the operator and cannot offset the external threat detections.

Closing Assessment

The site should be treated as unsafe for any sensitive interaction. Account creation, login, credential entry, wallet connection, payments and file downloads should all be avoided. Any access should be limited to passive viewing from an isolated, non-production environment, until independent reputation checks clear the domain.