I'd steer clear of claimmysurplusfunds.com. It's been flagged by Google for trying to trick visitors, the site is broken, and there's no way to tell who operates it. That combination makes it hard to trust, especially for something involving money.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
1
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
2
Close the tab
Especially if you got here from an email, text message or social media ad.
3
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
4
Warn others
Report the site and share this check with anyone who sent you the link.
Cross-referenced 36 live signals from Google Safe Browsing, VirusTotal, WHOIS and more on Oct 28, 2026.How we score →
Where the score comes from
We look at six areas. Here's how claimmysurplusfunds.com did in each.
15
Security
Google Safe Browsing has flagged this site for social engineering, which is a strong warning that it may try to trick visitors. That one signal weighs heavily enough to make the security posture a critical concern, even though the TLS setup itself is modern.
30
Identity
The domain is three years old and has been archived, which is positive, but there is no publicly named owner or business behind it. For a site that asks people to claim surplus funds, anonymity is a serious red flag.
40
Reputation
Not on email or DNS blocklists, and it has a three-year web archive history. The Safe Browsing flag, however, overrides those neutral signals and creates a real reputation problem.
25
Transparency
The homepage is down with a database error, so there is no way to see who runs this service or how they present themselves. No about page, no social media, no contact info visible — this site is effectively a black box.
20
Compliance
No privacy policy or terms of service were found. Any site that collects personal information to let people check for surplus funds should have these in place. Their absence is a clear compliance gap.
65
Infrastructure
Cloudflare handles the hosting and email authentication is set up, which are signs of competent technical management. But the site is currently broken — it returns a database error — which suggests poor maintenance or a recent problem.
What we checked
The 36 signals behind this report.
Security & Transport
Certificate Issuer: Neutral
Google Trust Services
Certificate issued by Google Trust Services
Google Web Risk: Bad
Flagged
Flagged for: SOCIAL_ENGINEERING
Legacy TLS: Neutral
Accepted
Server still accepts TLS 1.0/1.1 from clients that ask for them, which CDNs such as Cloudflare allow by default. Browsers stopped offering these versions in 2020, so visitors connect with TLS 1.2 or later
Protective DNS: Neutral
Not blocked
Cloudflare's malware-blocking resolver (1.1.1.2) answered normally for this domain. These resolvers refuse domains their threat intelligence lists for malware or phishing, and a scam only days old often isn't listed yet. Quad9 gave no usable answer.
SSL Certificate: Good
Valid
Valid certificate, expires in 74 days
Security Headers: Neutral
0 of 6
Site does not set common security response headers (CSP, HSTS, X-Frame-Options, etc)
Server: Neutral
cloudflare
Web server: cloudflare
TLS Version: Good
TLS 1.3
Connection uses TLS 1.3
Identity & WHOIS
About Page: Neutral
Not found
No About / Team / Company page detected.
Branding: Neutral
Unable to check
The homepage answered with an error page
Business Disclosure: Neutral
Not found
No dedicated legal-entity disclosure page detected — common and expected outside the EU, but required for commercial sites in Germany, France, Spain, Italy, and other EU jurisdictions.
Contact Info: Neutral
Unable to check
The homepage answered HTTP 500, so the page read isn't the site's own
Domain Age: Good
3 years, 9 months
Domain created 2023-01-11 (3 years, 9 months ago)
Domain Expiry: Neutral
2027-01-11
Expires in 75 days. Registrars renew most domains automatically in the weeks before expiry, so a near date is normal
Legal Pages: Warning
Missing
No privacy policy or terms of service found — expected for commercial sites, normal for personal blogs and hobby projects
Registrant: Neutral
Not published
The registration record we could read names no owner. Many registrars publish no owner details at all since GDPR (2018), so this hides nothing unusual.
Registrar: Neutral
GoDaddy.com, LLC
Registered through GoDaddy.com, LLC
Infrastructure & DNS
CDN: Good
Cloudflare
Site is served behind Cloudflare — indicates real operational investment in edge infrastructure
DNS Blacklists: Neutral
Clean
Not listed by SpamCop, Barracuda and URIBL, the blacklists that answered
DNS Resolution: Good
4 IP(s)
Resolves to: 2606:4700:3034::6815:185, 2606:4700:3037::ac43:814e, 172.67.129.78, 104.21.1.133
DNSSEC: Neutral
Not enabled
Domain is not signed with DNSSEC
DNSSEC: Neutral
unsigned
DNSSEC status from WHOIS
Email (MX Records): Good
1 record(s)
Mail servers: mail.claimmysurplusfunds.com.
Hosting Network (ASN): Neutral
AS13335 CLOUDFLARENET
Hosted on: AS13335 CLOUDFLARENET (US)
Name Servers: Neutral
2 server(s)
DNS providers: rohin.ns.cloudflare.com., stella.ns.cloudflare.com.
Page Load Time: Neutral
441ms
Fast page load, timed once from our server in Europe including the DNS lookup, connection setup and any redirects
SPF Record: Good
Present
Domain has SPF email authentication configured
Reputation & Reach
Page Heading: Neutral
Error establishing a database connection
Page Title: Neutral
Database Error
Sitemap: Neutral
Not found
No sitemap found — common for smaller sites
Social Media Presence: Neutral
None found
No social media links found on homepage
Structured Data: Neutral
None found
No structured data markup found
Tranco Rank: Neutral
Not ranked
This site is not in the top 1 million most visited websites — this is normal for small or new businesses
Web Archive History: Good
3 years
Earliest archive snapshot from 20230314
Website Status: Warning
HTTP 500
Website returned status 500
robots.txt: Neutral
Not found
No robots.txt file — common for small sites
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
Claimmysurplusfunds.com presents itself as a service to help people claim surplus funds, but several warning signs make it hard to recommend. The biggest red flag is that Google Safe Browsing has flagged the site for social engineering — a tactic used to trick people into handing over personal or financial information. That alone should give anyone pause before entering sensitive data.
Beyond the security flag, the site itself is essentially broken. When we tried to visit it, we got a database error rather than a working homepage. There's no about page, no named owner, and no privacy policy or terms of service. For a site that likely asks for personal details to check for unclaimed money, those are basic pieces of information you'd expect to find.
The domain has been registered for three years and uses Cloudflare for infrastructure, which are not bad signs on their own. But with the site broken and the Google flag in place, there's not enough working evidence to trust that this service is legitimate. If you're looking for unclaimed funds, use an official state or government database instead — those are free and transparent.