Is champions-early-access.pages.dev a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This site is a single-page early-access landing page titled "Champions Ascension | Early Access". It is served from a free subdomain on a shared serverless web-hosting platform rather than from a standalone branded domain. It presents a pre-launch sign-up experience, and its apparent purpose is to collect early-access interest in a product or community called "Champions Ascension". The captured page is short, text-light and loads a large volume of third-party content in the background.

Scam/Impersonation Risk

This is the decisive area of concern. Several major security vendors currently flag the site as malicious, and the aggregate detection count is high enough that the site is treated as blacklisted by external threat intelligence. No brand impersonation or conflicting legal identities were established, and no phishing page was confirmed in the captured content. The risk therefore rests on the external blacklisting itself, not on a demonstrated deception pattern. That listing is the controlling fact, and the site's technical hygiene does not offset it. The sandbox run found no wallet-drainer behaviour, clipboard manipulation, hidden forms, credential posts to external hosts or content cloaking. That limits what was observed in the three test sessions, but it does not neutralise a live malicious listing. The page also issued a very large number of background requests to external hosts, 77 across the sessions, including several external POST submissions. All of these went to recognised destinations, but this external-heavy pattern means a visitor's data and browser context leave the origin to a wide set of parties. The domain is a shared-platform subdomain, which gives no independent assurance of a distinct operator. Free subdomains of this kind are cheap to create and discard, and this pattern is commonly used for short-lived campaign and lure pages. Evidence:

• Homepage and hosting platform: the site is a subdomain of a shared serverless hosting platform, with a continuous registration record of about 1.9 years.
• Web archive: only 3 snapshots, all captured on 2024-12-14, within a single tracked year, so the site has a very thin independent history.
• Homepage behaviour: 77 external background requests and 3 external POST submissions across 3 sandbox runs, all to recognised destinations, with up to roughly 84% of activity directed to external hosts.
• Threat intelligence: 12 engines rated the site malicious and 1 suspicious, including three tier-one security vendors.

Regulatory Verification Notes

The captured page gives no verifiable operator identity, so the real-world entity behind the site has not been independently established. Nothing in the evidence shows a licence, registration or regulatory standing, and no third-party broker or regulator listing was matched. The site itself reveals no legal-entity name, so no identity contradiction arises. A shared-platform subdomain also provides no organisational attribution of its own. Any claim of authorisation, whether regulatory, commercial or institutional, would have to be proven through independent registry checks. The valid transport encryption is a baseline hygiene control only. A domain-validated certificate confirms control of the hostname, not the identity or intent of its operator. Evidence:

• Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-24.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage: the page presents no company name, licence or registration reference.

What to Verify Next

Before any interaction, the operator's identity should be established outside the site. This means finding the product or organisation behind "Champions Ascension" through an independent official channel, such as a known corporate website, a verified social account or a regulator or business registry, and not through links on the page. Any sign-up invitation that reached a user by message or advertisement should be traced back to its sender. The official support and contact channels should be confirmed through an independent route. The current status of the external detections should be rechecked, since a delisting or clean rescan would materially change the picture. Evidence:

• Homepage: the early-access sign-up framing gives no verifiable reference to an established organisation.
• Threat intelligence: the site currently carries multiple malicious ratings, so any delisting needs to be confirmed independently.
• Hosting: the shared-platform subdomain cannot be tied to a named owner without an external source.

Summary Verdict

The site is rated as carrying elevated risk with a clearly cautionary posture. Active external blacklisting is decisive and outweighs the otherwise clean sandbox behaviour and valid certificate. The identity of the operator is unverified, and nothing in the evidence supports treating the site as a legitimate, established entity. Its apparent legitimacy cannot be assumed.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge nodes, and the origin server was not observable. This is a mitigating factor only. It confirms a reputable network provider with low infrastructure risk, but it limits independent hosting verification and can mask rapid content swaps. Protective infrastructure cannot offset the reputation risk established by the external detections.

Closing Assessment

The site should be limited to read-only viewing at most, and only from an isolated, up-to-date browser. Account sign-in, credential entry, wallet connection and any financial or personal-data submission should be avoided until independent verification is complete and the external listing is cleared. Downloads from the site should not be opened.