Is Pages a scam? TrustSniffer's high-risk assessment of blackpantherfi.pages.dev: 0/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

BlackPantherFi is a website served from a free, shared subdomain on a developer-hosting platform. Its name suggests a finance-themed project. When the site was analysed, the homepage presented only a protective interstitial warning of suspected phishing, not a normal product or marketing page. Its apparent purpose is therefore unconfirmed: no products, yields, leverage figures or business claims were observable. The site's reputation record shows it is actively flagged by security vendors.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent security engines currently classify the site as malicious, and the site is blacklisted by external threat-intelligence sources. Those sources include a number of well-regarded security vendors, and the detection level was high enough on its own to trigger a protective override of the overall assessment. The page served to the analysis browser was an interstitial warning of suspected phishing. This reinforces the reputational finding, and a prior phishing association is also recorded for the domain. No conflicting legal entities or confirmed brand impersonation were identified. The risk stems from the active malicious listing, not from identity conflict. Behavioural testing found no wallet-connection prompts, wallet-drainer behaviour, clipboard manipulation, hidden forms or credential posts to outside parties. Even so, the surface showed heavy third-party request traffic, repeated script errors and very large page-structure changes after interaction. Those traits can accompany content swapping or staged payload delivery, so the absence of a drainer in these runs does not offset the listing. The ownership of the site is opaque, which means no accountable operator can be tied to the activity. Evidence:

• Homepage: the page captured was a suspected-phishing interstitial, not site content, and the site is flagged malicious by ten security engines, with one more rating it suspicious.
• Domain provenance: registered about 1.9 years ago, with 7 archive snapshots spanning 2024–2026 (3 years tracked), which is a thin and young history.
• Homepage behaviour: about 96% of observed external-activity share went to third parties, with 14 console errors and roughly 1,500 page mutations after interaction.
• Homepage behaviour: no wallet-provider detection, clipboard writes or external password forms were observed in three successful runs.

Regulatory Verification Notes

No licence, registration or regulator match is evidenced for this site, and no third-party broker-reputation record corresponds to it. Governance and ownership are opaque: the operator cannot be tied to a real-world entity, and the registration record is incomplete. The site is not regulated by a verified third party, and its on-site disclosures could not be assessed because the visible page was a warning interstitial. These are verification gaps, not scam evidence on their own. In this case they sit alongside confirmed malicious listings and therefore weigh more heavily. Evidence:

• Homepage: the page captured carried no legal, licensing or corporate-registration information.
• Hosting: served from AS13335 (Cloudflare, Inc., US), which is shared infrastructure that says nothing about the operator.
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-12-25. Domain validation proves control of the hostname only, not who operates it.
• Reputation: no match in the broker-reputation dataset, so no external regulatory or complaint context exists.

What to Verify Next

Any engagement with this site should be preceded by a check of the site's current standing with the reputation services that flagged it. If the owner is a legitimate project, it is most likely a case for remediation and delisting. Any claimed firm identity should be confirmed independently through an official regulator registry and through contact details obtained from an offline or otherwise trusted route, not from the site. Where the site later displays real content, any financial product claims, returns or leverage figures should be tested against registry records before reliance. Evidence:

• Homepage: no identifiable operator or registration number was available to check against a registry.
• Domain: the site sits on a shared platform subdomain, so the hostname gives no ownership attribution.
• Reputation: active detections remain current, so the site's standing should be rechecked before any further use.

Summary Verdict

The site is assessed as high risk. Active malicious listings and a suspected-phishing warning dominate every other signal, and neither the valid certificate nor the clean behavioural runs outweigh them. The operator cannot be identified, so no legitimacy case can be built.

Infrastructure Integrity

The site is fronted by a mainstream CDN and WAF, and all four observed addresses are edge servers; the origin server is not visible. This is a recognised, reputable platform with a valid certificate, and it mitigates some technical risk. It cannot offset the reputation findings. It also prevents independent verification of where the content is actually hosted.

Closing Assessment

Treat the site as unsafe for any login, credential entry, wallet connection or payment, and do not download anything from it. Any contact should be limited to passive viewing, if it is needed at all.