Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
papartrade.xyz shows high-risk / scam indicators.
| What this site appears to be | A prototype/preview trading interface labeled 'Papertrade' showing live crypto prices, leverage controls, and calls to connect wallet and deposit. Lacks provenance, regulatory or custody details and includes wording indicating independent prototype status. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a crypto-trading prototype branded “Papertrade,” presenting live market data, simulated trading controls, portfolio functions, and prompts to connect a wallet or deposit funds; its apparent purpose is to preview an exchange or broker-style interface rather than provide a clearly identified, established financial service.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. The homepage describes itself as an “Independent interface preview” and states that it is not affiliated with Papertrade, yet it still presents deposit, withdrawal, wallet-connection, margin, and trading functionality. This creates a direct mismatch between prototype status and financial-interaction prompts, with unclear custody and value-flow arrangements. External reputation evidence records the domain as blacklisted, including malicious detections from multiple external sources. No separate conflicting legal-entity names or explicit brand-impersonation finding were observed, but the blacklist status and the homepage’s deposit-before-service design are sufficient to make sensitive interaction inappropriate.
- The homepage displays “Connect wallet,” “Deposit,” “Withdraw,” leverage controls, and portfolio functions while identifying itself as an independent prototype.
- The homepage states “Not affiliated with Papertrade” and directs users toward the “official Papertrade,” leaving the relationship between the interface and any real service unresolved.
- The domain was registered on 2026-10-07 and is approximately 0.03 years old, according to the registration record.
- The site has 3 archive snapshots spanning 2026-10-07 through 2026-10-19, with 1 year tracked.
Regulatory Verification Notes
The available site content does not establish a legal operator, licensing authority, registration number, custody arrangement, or regulatory status for the financial activity it presents. The homepage’s prototype disclaimer is a material disclosure, but it does not resolve who controls the interface or whether any deposit-related function is authorized. This is a verification gap rather than, by itself, proof of fraud. The real-world identity remains unverified, and no third-party broker match was identified in the supplied evidence.
- The homepage contains no stated legal entity, license number, regulator, or custody disclosure.
- The homepage labels the service an “Independent interface preview” and says trading opens on “official Papertrade.”
- The homepage identifies market data from Hyperliquid but does not state an operator, contractual relationship, or authorization for the interface.
What to Verify Next
Before any sensitive interaction, an organization should independently confirm the operator and obtain written confirmation from the official Papertrade service that this interface is authorized. Any claimed financial or trading authorization should be checked directly against the relevant regulator’s public register using the legal entity name, not merely the site branding. The payment, withdrawal, custody, and dispute arrangements should also be documented and independently validated before funds or credentials are considered.
- The homepage provides the appropriate starting point for validating the “official Papertrade” relationship.
- The absence of a named operator or license number on the homepage requires independent legal-entity and registry checks.
- The wallet, deposit, and withdrawal prompts identify the specific interaction paths that require confirmation before use.
Summary Verdict
The overall posture is critical risk, with the available evidence showing a site that should not be trusted for sensitive financial interaction. Its apparent prototype status, unresolved operator identity, and adverse external reputation signals outweigh the limited technical indicators of normal web service operation.
Infrastructure Integrity
The site is delivered through Cloudflare’s CDN/WAF infrastructure, with observed hosting associated with AS13335 and no origin server identified in the supplied network analysis. This reduces direct exposure of the origin but does not establish legitimacy or offset the site’s reputation and content risks.
- Hosted through AS13335, CLOUDFLARENET — Cloudflare, Inc., US; observed edge IP 172.67.145.203.
- TLS certificate issued by YE1 at DV validation level, valid to 2027-01-05.
- All observed addresses were CDN edge servers, with 8 edge IPs and 0 likely origin candidates.
Closing Assessment
The site should be limited to passive observation while its operator, authorization, and external reputation are independently resolved; no login, credential submission, wallet connection, deposit, or other financial action should occur.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, several checks together, hosting and network.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
04 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 25% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of papartrade.xyz.
- The request stayed on papartrade.xyz. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-07. Noted
- The earliest public archive of this site is from 2026-10-07. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::ac43:91cb |
| Name servers | AGUSTIN.NS.CLOUDFLARE.COM, ZOE.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-05 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | 2027-10-07 |
| Archive first seen | 2026-10-07 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about papartrade.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.