Is photon-trading.vercel.app a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page front end presenting itself as "Photon – Your Trusted Platform for Token Discovery & Trading". It is served from a free subdomain on a public application-hosting platform rather than from a standalone branded domain. A visitor sees a short marketing page, roughly 1,400 characters of text, positioning the site as a token-discovery and trading terminal. Its apparent purpose is to attract users to crypto-asset trading, but the captured content gives no operator, product specification or service terms.

Scam/Impersonation Risk

The analysis shows active, corroborated threat indicators. Several independent threat-intelligence engines classify the site as malicious, and one of them is a major network-security vendor. The site is therefore blacklisted by external reputation sources, and that finding alone sets the cautionary posture. No conflicting legal entities and no confirmed brand impersonation were observed. The evidence is also silent on the site's real-world operator. The page's headline claim, "your trusted platform", is an unverifiable superlative that does nothing to establish trust. The name evokes a token-trading terminal, and the evidence does not connect the site to any established brand that bears it. A crypto-trading front end that is new, thinly documented and flagged as malicious fits the profile of credential and wallet-harvesting lures. The sandbox did not capture such behaviour. Across three runs it recorded no external requests, no wallet-provider interaction, no hidden forms and no clipboard manipulation. This is a mitigating observation about the captured page. It cannot offset the external detections, because a harmful payload could be served selectively or introduced later. Evidence:

• Homepage: the title and copy assert that the site is a "trusted platform for token discovery & trading", with no substantiating detail.
• External reputation: 7 engines rate the site malicious and 1 suspicious.
• History: the domain is about 0.55 years old (~202 days), with 3 archive snapshots spanning 2026-04-07 to 2026-04-08 (1 year tracked).
• Behavioural sandbox: 3 of 3 runs succeeded, with zero external network calls and no wallet or form-based data capture.

Regulatory Verification Notes

The captured page names no legal entity, registered address, licence or regulator. Nothing in the evidence ties the site to a real-world operator, and the evidence leaves ownership and governance unclear. A trading service that invites users to transact normally discloses its operating entity and authorisation status, and this page does not. This is a transparency gap rather than proof of wrongdoing. Here it compounds the external threat detections, so the page offers no counterweight. No third-party broker-review record matched this site, so no outside reputational context exists beyond the threat detections. Evidence:

• Homepage: no operating company, licence number, regulator or jurisdiction is stated.
• Hosting: served from AS16509 (AMAZON-02, US).
• Transport encryption: TLS certificate issued by WR1 (DV, domain-validation only), valid to 2026-11-27 (31 days remaining). It confirms an encrypted channel but says nothing about the operator's identity.

What to Verify Next

Because the site is flagged as malicious, any verification should be done without logging in, connecting a wallet or sending funds. First, determine whether the genuine Photon trading product, if one exists, publishes this exact address through its own official channels. A link supplied by a third party cannot establish that. Second, establish who operates the service and under which jurisdiction. Then check whether that entity holds any required authorisation in the relevant financial or virtual-asset registry. Finally, re-check the site's reputation status before any future contact, since a removal of the detections would change the picture. Evidence:

• Homepage: the branding claims a trading product but names no accountable operator to check against a registry.
• External reputation: the current detections are the main reason these checks are needed before any engagement.
• Site history: the very short archive history gives no earlier content against which to compare the site's claims.

Summary Verdict

The overall posture is high-risk. Corroborated external threat detections dominate, and a short operating history, unestablished operator identity and unverifiable trust claims leave no evidence that could offset them. The technical sandbox results and valid encryption are the only favourable observations, and they are not enough to move the assessment out of a clearly cautionary category.

Infrastructure Integrity

The site is delivered through a trusted content-delivery network on a public application-hosting platform. The observed addresses are shared edge servers, and the true origin server is not visible. This is a mitigating factor only and offsets none of the reputation findings. The 93 abuse reports on the primary edge address relate to that shared provider address, not to this site. They carry no confidence weighting and have been discounted accordingly. The same shared arrangement lets site content be changed quickly without any change to the visible network footprint.

Closing Assessment

The site should be treated as unsafe for sign-in, credential entry, wallet connection or any financial transaction. At most, it may be viewed passively from an isolated, non-production device. Anyone who has already interacted with it should rotate affected credentials and review wallet permissions.

Signals weighed against the site

• AbuseIPDB: 93 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.