Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
app-perpl.top is low-trust and potentially risky.
| What this site appears to be | The page is a default nginx 404 Not Found error response. It contains no service description, forms, links, scripts, or branding, so no business activity or risk indicators can be determined. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- No flags from the reputation services TrustSniffer consulted at assessment time.
Full analysis
Overview
This website is a bare, newly stood-up web property on the ".top" domain "app-perpl.top". Its landing page returns only a default web-server "404 Not Found" error from an nginx server on Ubuntu, with no branding, text, links, forms, scripts or product description. It presents no visible service or business model, so its apparent purpose cannot be established from the content itself. The "app-" naming style suggests an application front end or portal, but nothing on the page confirms this.
Scam/Impersonation Risk
The overall posture is high risk. At least one external threat-intelligence source currently lists the domain as adverse, and this is a confirmed blacklist hit. In addition, more than one security scanning engine rated it suspicious. The page itself shows no phishing form, brand impersonation, wallet-connection behavior, clipboard manipulation or cloaking, so the risk comes from reputation and provenance rather than from observable page content. The domain was registered only weeks ago, and its web-archive footprint consists of two captures taken within hours of each other on the registration day. That is a very thin and very recent footprint with no history of legitimate operation. A blank error page on a new domain that is already blacklisted fits the pattern of infrastructure staged ahead of a campaign, and content can be swapped in at any moment. The automated business-model classification also flagged a deposit-before-service pattern. That flag is an inference with low confidence, because the page shows no offering, but it points toward the interaction types that the broader assessment treats as unsafe. No conflicting legal identities were observed, because no legal or identity content exists to compare.
- Homepage: returns only a default "404 Not Found" response from nginx/1.24.0 on Ubuntu, with about 49 characters of text, no title, no meta description and no outbound links.
- Domain registration: created 2026-09-27 (about 0.06 years, roughly 23 days old), with the registration expiring 2027-09-27.
- Web archive: 2 snapshots spanning 2026-09-27 to 2026-09-27 (1 year tracked), with no prior history.
- Reputation: an external blacklist listing is active, and two scanning engines rated the domain suspicious, with none rating it malicious.
Regulatory Verification Notes
The site publishes no legal, terms, privacy, about or contact pages, so there is no corporate name, licence, registration number or jurisdiction to assess. Because the site presents no regulated service, this is a content gap, not a finding in itself. The real-world operator remains unverified and cannot be connected to any known brand or person. The registrant details are hidden behind a privacy service, which is administrative and is not treated as a contradiction. The registrar is Eranet International Limited. The site holds a valid but basic domain-validated TLS certificate, which only shows control of the domain and says nothing about who operates it. No third-party broker or regulatory-database match exists for this domain, so there is no licensing signal in either direction. The adverse reputation signal described above is the decisive regulatory-relevant fact.
- Site content: no legal, licensing, ownership or contact disclosures appear on the only page that responds.
- Hosting: served from AS13335 (CLOUDFLARENET, US).
- Transport encryption: TLS certificate issued by YE2 (DV level), valid to 2026-12-26 with 65 days remaining.
- Registration: privacy-redacted registrant fields, with the domain registered through Eranet International Limited.
What to Verify Next
Treat the domain as untrusted until it can be tied to a named, independently verifiable organization. If a link to this domain was received through a message, advertisement, social post or search result, the first step is to trace that referral to its source and confirm through an independent route that the organization actually published it. Any claimed brand or product should be checked against that organization's officially published domain, which should be reached by typing the address or using a known bookmark, not by following links. If the site later begins offering financial, trading or account services, the claimed licence should be confirmed directly in the relevant regulator's public register. The official support and contact channels should also be confirmed through an independent route. The domain's status should be rechecked after any content appears, because a page that is blank today can change without notice.
- Homepage: the empty response means no claim, brand or licence is available to cross-check yet.
- Domain registration: the roughly 23-day-old domain has no established operating record to rely on.
- Reputation: the active blacklist listing means any later content should be re-evaluated from scratch.
Summary Verdict
The overall posture is elevated risk with a clearly cautionary stance. A confirmed adverse reputation listing combines with a brand-new domain, an unverified operator and a page with no substance to establish legitimacy. The absence of visible malicious content does not offset these factors, and the site's apparent purpose remains unknown.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The origin server is not observable, so hosting cannot be independently verified, and this layer can allow content to change quickly without any visible change in the network footprint. The CDN is a legitimate mitigating factor, because the shared infrastructure itself has a clean abuse record and the TLS certificate is valid. It does not offset the reputation concern and does not indicate who operates the site. A young-domain and sparse-subdomain heuristic is present, but it is unconfirmed and carries little weight.
Closing Assessment
The domain should be treated as read-only at most. No account login, credential entry, wallet connection, deposit or other financial interaction should take place, and nothing should be downloaded from it. If a message or advertisement directed anyone here, that referral should be treated as suspect and reported to the apparent sender through a separately verified channel.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The page loaded on its own domain but had no readable content.Page content
rule:PAGE_CONTENT_EMPTY
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
05 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of app-perpl.top.
- The request stayed on app-perpl.top. It was not redirected to another domain. Clear
- Registration is published under Eranet International Limited. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-27. Noted
- The earliest public archive of this site is from 2026-09-27. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Eranet International Limited |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3032::6815:3c3c |
| Name servers | cloe.ns.cloudflare.com, yoxall.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-26 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-27 |
| Archive first seen | 2026-09-27 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about app-perpl.top at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.