Is pharosnetwork-tge.com a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a single-page website titled "Pharos RealFi Access Program" on the domain pharosnetwork-tge.com. The domain name pairs a blockchain-network brand with a token-generation-event suffix. The page presents itself as an access or participation program, which points to a crypto-asset or token-distribution offering. Its operator and business model could not be established. The title and domain naming invite association with an established blockchain project, but nothing independently ties the site to that project.

Scam/Impersonation Risk

Contradictory signals are present, and the site is blacklisted by external threat intelligence. A substantial share of the security engines that scanned the domain rate it malicious or suspicious, and these include several major, widely deployed security vendors. This is a decisive negative. The domain is also very young, and its archive footprint covers only the months since registration, so there is no history of legitimate operation to offset the detections. The behavioural sandbox found no wallet-drainer activity, clipboard hijacking, hidden forms, cloaking or external credential forms. These absences do not offset the reputation findings, because a young page can change behaviour quickly. The sandbox did observe that, at peak, most page requests went to third-party origins. None of those origins was unrecognised, but the page is therefore assembled largely from external resources. The domain's resemblance to a known blockchain project's name, combined with a participation-program pitch, is the pattern commonly used to lure visitors into wallet-linked or credential-bearing actions. No conflicting legal identities were found, and the evidence does not confirm impersonation of a specific brand. Evidence:

• Domain registered 2026-04-27 (~0.5 years old), per registration records.
• 9 archive snapshots spanning 2026-04-28 to 2026-08-03 (1 year tracked).
• The multi-engine reputation scan returned 16 malicious and 3 suspicious verdicts, with three tier-one vendors among the detections.
• During sandbox runs on the homepage, up to 77.4% of requests went to external origins, with no non-whitelisted XHR or POST activity.

Regulatory Verification Notes

No regulator-sourced registration or licence was matched to this site, and no third-party broker-reputation record exists for it. Neither point is itself evidence of fraud, but with the threat listings they leave the site with no verifiable regulated standing. The registration details do not identify an operator, which is ownership opacity rather than an identity contradiction. Technical hygiene is basic: the site has a valid certificate and a recognised registrar. Both are commonplace and cheap to obtain, so they do not demonstrate legitimacy. The domain also does not appear in any decentralised-finance protocol directory, so no recognised protocol is publicly linked to it. Evidence:

• Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with expiry on 2027-04-27.
• TLS certificate issued by YE1 (domain-validated only), valid to 2027-01-21.
• Served from AS13335 (Cloudflare, Inc., US).
• No matching entry in a DeFi protocol directory (no TVL recorded).

What to Verify Next

Verify whether the real Pharos Network project operates any "RealFi Access Program" by reaching its official channels through an independently sourced route, not through any link, button or QR code on this site. Confirm that this domain is listed there as official before any interaction. If it is not listed, treat the page as an unauthorised lookalike. Anyone who has already interacted with it should report it to the registrar and the domain's hosting abuse channel. They should also review any wallet approvals and revoke those they did not intend. Evidence:

• The homepage title presents a named access program that must be matched against the project's own announcements.
• The domain name combines the project brand with a "tge" suffix, a pattern worth checking against the official domain list.
• The registration record shows a registrar that accepts abuse reports.

Summary Verdict

The overall posture is high risk. Active external threat detections are decisive, and the site's youth, lack of verifiable ownership and brand-adjacent naming reinforce that conclusion rather than offset it. Basic technical hygiene carries no weight against this. The evidence does not support treating the site as an established or apparently legitimate website.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node. The true origin server is not visible, so hosting cannot be independently verified, and content could be swapped quickly behind the edge without notice. The valid certificate and mainstream edge provider mitigate transport-level exposure only. They do not offset the reputation risk and are not evidence of legitimacy.

Closing Assessment

Read-only viewing is the most this site should receive, and even that is best avoided. Do not log in, connect a wallet, sign transactions, enter credentials or make any payment or transfer on this domain. Do not download anything from it. Interaction should resume only if the official project confirms the domain through its own channels and the external detections have cleared.