--- title: "Is app-perpl.top Safe? Risk Report, Score 25/100" source: TrustSniffer type: Website trust & fraud report subject: "app-perpl.top" verdict: "Low Trust" title: "Is app-perpl.top Safe? Warning Signs, Score 25/100" trust_score: 25 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/app-perpl.top assessed: 2026-10-21 --- # Is app-perpl.top safe? TrustSniffer's low-trust assessment: 25/100 ## Verdict **Verdict: Low Trust, trust score 25/100.** app-perpl.top is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-21 by automated analysis. Classification confidence 75%. | Field | Value | | --- | --- | | What this site appears to be | The page is a default nginx 404 Not Found error response. It contains no service description, forms, links, scripts, or branding, so no business activity or risk indicators can be determined. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | None flagged it (VirusTotal) | Clear | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 22 days old (Most scam domains are under a year old) | Risk | | Web archive | Archived since 2026 (2 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YE2) | Noted | ## The page as captured ![Screenshot of the app-perpl.top homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/app-perpl.top/screenshots/first.png) _What app-perpl.top served when TrustSniffer captured it on 2026-10-21. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - No flags from the reputation services TrustSniffer consulted at assessment time. ## Full analysis ### Overview This website is a bare, newly stood-up web property on the ".top" domain "app-perpl.top". Its landing page returns only a default web-server "404 Not Found" error from an nginx server on Ubuntu, with no branding, text, links, forms, scripts or product description. It presents no visible service or business model, so its apparent purpose cannot be established from the content itself. The "app-" naming style suggests an application front end or portal, but nothing on the page confirms this. ### Scam/Impersonation Risk The overall posture is **high risk**. At least one external threat-intelligence source currently lists the domain as adverse, and this is a confirmed blacklist hit. In addition, more than one security scanning engine rated it suspicious. The page itself shows no phishing form, brand impersonation, wallet-connection behavior, clipboard manipulation or cloaking, so the risk comes from reputation and provenance rather than from observable page content. The domain was registered only weeks ago, and its web-archive footprint consists of two captures taken within hours of each other on the registration day. That is a very thin and very recent footprint with no history of legitimate operation. A blank error page on a new domain that is already blacklisted fits the pattern of infrastructure staged ahead of a campaign, and content can be swapped in at any moment. The automated business-model classification also flagged a deposit-before-service pattern. That flag is an inference with low confidence, because the page shows no offering, but it points toward the interaction types that the broader assessment treats as unsafe. No conflicting legal identities were observed, because no legal or identity content exists to compare. Evidence: - Homepage: returns only a default "404 Not Found" response from nginx/1.24.0 on Ubuntu, with about 49 characters of text, no title, no meta description and no outbound links. - Domain registration: created 2026-09-27 (about 0.06 years, roughly 23 days old), with the registration expiring 2027-09-27. - Web archive: 2 snapshots spanning 2026-09-27 to 2026-09-27 (1 year tracked), with no prior history. - Reputation: an external blacklist listing is active, and two scanning engines rated the domain suspicious, with none rating it malicious. ### Regulatory Verification Notes The site publishes no legal, terms, privacy, about or contact pages, so there is no corporate name, licence, registration number or jurisdiction to assess. Because the site presents no regulated service, this is a content gap, not a finding in itself. The real-world operator remains unverified and cannot be connected to any known brand or person. The registrant details are hidden behind a privacy service, which is administrative and is not treated as a contradiction. The registrar is Eranet International Limited. The site holds a valid but basic domain-validated TLS certificate, which only shows control of the domain and says nothing about who operates it. No third-party broker or regulatory-database match exists for this domain, so there is no licensing signal in either direction. The adverse reputation signal described above is the decisive regulatory-relevant fact. Evidence: - Site content: no legal, licensing, ownership or contact disclosures appear on the only page that responds. - Hosting: served from AS13335 (CLOUDFLARENET, US). - Transport encryption: TLS certificate issued by YE2 (DV level), valid to 2026-12-26 with 65 days remaining. - Registration: privacy-redacted registrant fields, with the domain registered through Eranet International Limited. ### What to Verify Next Treat the domain as untrusted until it can be tied to a named, independently verifiable organization. If a link to this domain was received through a message, advertisement, social post or search result, the first step is to trace that referral to its source and confirm through an independent route that the organization actually published it. Any claimed brand or product should be checked against that organization's officially published domain, which should be reached by typing the address or using a known bookmark, not by following links. If the site later begins offering financial, trading or account services, the claimed licence should be confirmed directly in the relevant regulator's public register. The official support and contact channels should also be confirmed through an independent route. The domain's status should be rechecked after any content appears, because a page that is blank today can change without notice. Evidence: - Homepage: the empty response means no claim, brand or licence is available to cross-check yet. - Domain registration: the roughly 23-day-old domain has no established operating record to rely on. - Reputation: the active blacklist listing means any later content should be re-evaluated from scratch. ### Summary Verdict The overall posture is **elevated risk** with a clearly cautionary stance. A confirmed adverse reputation listing combines with a brand-new domain, an unverified operator and a page with no substance to establish legitimacy. The absence of visible malicious content does not offset these factors, and the site's apparent purpose remains unknown. ### Infrastructure Integrity The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The origin server is not observable, so hosting cannot be independently verified, and this layer can allow content to change quickly without any visible change in the network footprint. The CDN is a legitimate mitigating factor, because the shared infrastructure itself has a clean abuse record and the TLS certificate is valid. It does not offset the reputation concern and does not indicate who operates the site. A young-domain and sparse-subdomain heuristic is present, but it is unconfirmed and carries little weight. ### Closing Assessment The domain should be treated as read-only at most. No account login, credential entry, wallet connection, deposit or other financial interaction should take place, and nothing should be downloaded from it. If a message or advertisement directed anyone here, that referral should be treated as suspect and reported to the apparent sender through a separately verified channel. _Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 5 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive, registration and ownership. ### 01 External reputation - A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`) ### 02 Page content - The page loaded on its own domain but had no readable content. (Page content `rule:PAGE_CONTENT_EMPTY`) ### 03 Hosting and network - The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`) - The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`) ### 04 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 05 Registration and ownership - The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`) ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 25% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of app-perpl.top. - The request stayed on app-perpl.top. It was not redirected to another domain. (Clear) - Registration is published under Eranet International Limited. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-09-27. (Noted) - The earliest public archive of this site is from 2026-09-27. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Eranet International Limited | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3032::6815:3c3c | | Name servers | cloe.ns.cloudflare.com, yoxall.ns.cloudflare.com | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | YE2 | | SSL expiry | 2026-12-26 | | Domain age | 0.06 years (continuous registration) | | Domain expiry | 2027-09-27 | | Archive first seen | 2026-09-27 | | Archive snapshots | 2 | | Reputation | VirusTotal: 0 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about app-perpl.top at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [dapploytracs.top](https://trustsniffer.com/report/dapploytracs.top), another .top site assessed as low-trust (Low Trust, 43/100) - [proposals-firelight.top](https://trustsniffer.com/report/proposals-firelight.top), another .top site assessed as low-trust (Low Trust, 25/100) - [iproyal.top](https://trustsniffer.com/report/iproyal.top), another .top site assessed as low-trust (Low Trust, 30/100) - [delphiaonline.top](https://trustsniffer.com/report/delphiaonline.top), another .top site assessed as low-trust (Low Trust, 25/100) - [aiddj.top](https://trustsniffer.com/report/aiddj.top), another .top site assessed as low-trust (Low Trust, 25/100) - [rayocosmico.com](https://trustsniffer.com/report/rayocosmico.com), another site assessed as low-trust (Low Trust, 25/100) - [gizemlivadi.com](https://trustsniffer.com/report/gizemlivadi.com), another site assessed as low-trust (Low Trust, 30/100) - [mundocap.com](https://trustsniffer.com/report/mundocap.com), another site assessed as low-trust (Low Trust, 50/100) - [pie-experiences.com](https://trustsniffer.com/report/pie-experiences.com), another site assessed as low-trust (Low Trust, 40/100) - [mask.associates](https://trustsniffer.com/report/mask.associates), another site assessed as low-trust (Low Trust, 40/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) --- *Source: [TrustSniffer](https://trustsniffer.com/report/app-perpl.top) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/app-perpl.top · assessed 2026-10-21.*