Is percolator-trade.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Percolator is a newly launched website at percolator-trade.com. Its page title presents it as a venue for "permissionless perpetual markets on Solana", meaning a crypto derivatives and trading front end aimed at visitors who want to trade perpetual contracts on the Solana blockchain. Its apparent purpose is to draw users into on-chain trading activity, which would normally involve connecting a wallet and committing funds.

Scam/Impersonation Risk

This site carries confirmed contradictory signals. Multiple independent threat-intelligence sources currently flag the domain as malicious or suspicious, and it is blacklisted by external reputation sources. That is a decisive negative, and no hosting protection or technical hygiene offsets it. No brand impersonation and no conflicting legal identities were observed. The risk therefore rests on the blacklisting, not on identity inconsistency. The domain is also very recently registered. Its web-archive footprint is correspondingly thin, so there is no track record to counterbalance the reputation hits. Product pages promoting derivatives trading on a brand-new domain are a pattern commonly exploited for fund-collection and wallet-targeting abuse. Browser-behavior testing over three runs found no wallet-drainer activity, no clipboard manipulation, no hidden forms and no external password forms. Those clean results do not neutralise the blacklisting. The same testing recorded heavy third-party traffic from the homepage: dozens of external background requests, a notable share of them to destinations outside the recognised-service set. It also recorded a number of outbound data submissions to such destinations and a very high volume of script errors. Together these point to an unstable, externally dependent page that sends data to parties the visitor cannot identify. Evidence:

• Homepage reputation check: 4 malicious and 2 suspicious detections across major threat-intelligence engines, plus an external blacklist hit.
• Domain registration: created 2026-06-07 (~0.38 years old), registered through PDR Ltd. d/b/a PublicDomainRegistry.com.
• Web archive: 3 snapshots, spanning 2026-09-11 to 2026-09-22 (under 1 year tracked).
• Homepage behavior: 52 external XHR/fetch requests (9 to non-whitelisted destinations), 18 external POSTs (6 to non-whitelisted destinations), and 416 console errors across 3 sandbox runs.

Regulatory Verification Notes

The homepage presents a leveraged-style derivatives and trading proposition, yet the evidence contains no license, registration number or regulator reference tying the site to a supervised entity. No third-party regulatory match or broker-reputation record was found for it. On-page disclosure of the operating company is unclear, and the real-world operator is not independently connected to the site. This is a verification gap and is not by itself proof of wrongdoing. Here it compounds a reputation problem that is already serious. The site's valid transport encryption confirms only that the connection is encrypted. It says nothing about who runs the site or whether it is lawful. Evidence:

• Homepage: derivatives trading proposition with no regulator, license or registration reference identified.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-01.

What to Verify Next

Before any engagement, the operator's legal name and jurisdiction should be established through an independent route, such as a company registry or a financial regulator's public register, rather than through links on the site. Any claimed authorisation for offering derivatives should be checked directly with the named regulator. Any official contact channels, social accounts or smart-contract addresses should be confirmed through the project's independently verifiable announcements, not through the site itself. The domain should be re-screened against current threat-intelligence listings before any change in posture is considered, since listings can be cleared or escalated. Evidence:

• Homepage: no named operating entity or regulator reference was identified for cross-checking.
• Reputation check: current malicious and suspicious detections remain unresolved.

Summary Verdict

The available evidence supports a clearly high-risk posture. A confirmed blacklisting on a very young domain with no established history outweighs the site's technically tidy presentation. Its real-world operator has not been independently connected to the site, so no legitimacy can be inferred from its on-page claims.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers. The true origin server was not observable. This protective layer is a mitigating factor only. It cannot offset the reputation findings, and edge-only visibility prevents independent confirmation of where the content is actually hosted. It also allows content to be swapped without any visible change in infrastructure.

Closing Assessment

At most, the site should be viewed read-only. No wallet should be connected, no credentials entered, and no funds, tokens or personal data submitted until the listings are cleared and the operator is independently identified.