Is Pages a scam? TrustSniffer's high-risk assessment of pikachusub.pages.dev: 0/100

Overview

Pika Infinity is a single-page cryptocurrency promotion hosted on a free Cloudflare Pages subdomain rather than on a branded domain. Its page title advertises "the best coin presale to buy" for 2024, so it appears to solicit purchases of a token before launch. The apparent business model is a token pre-sale funnel aimed at retail buyers, and the site gives no verifiable operating company behind the offer.

Scam/Impersonation Risk

Contradictory signals are present and substantial. The domain is confirmed blacklisted: several independent threat-intelligence sources flag it as malicious or suspicious, and it also carries a prior phishing association. This external corroboration is the decisive factor in the assessment. No conflicting legal entity names were observed, and no brand impersonation was established. The risk therefore rests on the reputation findings and on the site's behaviour. In three of three automated browsing sessions, the homepage contained hidden forms that a visitor cannot see. Hidden forms on a page that solicits coin purchases are a recognised pattern for covert data capture. The page also made a large volume of outbound requests, including a number of external form submissions, and generated a high count of script errors. This is consistent with a hastily assembled or templated page. The sessions did not detect a wallet-connection prompt, clipboard tampering or content cloaking, so the exact mechanism of harm is not established. The presale framing, the dated "2024" promise and the lack of any accountable issuer are classic traits of speculative token-promotion schemes. Evidence:

• Homepage: the page title promotes a "best coin presale to buy 2024" and presents no identifiable issuer.
• Homepage behaviour: hidden forms were detected in 3 of 3 sessions, with 49 external XHR calls, 16 external POST requests and 24 console errors.
• Provenance: the domain was registered in 2025 (~1.8 years old), with only 5 archive snapshots spanning 2025–2026 (2 years tracked).
• Reputation: 4 malicious and 1 suspicious detections were recorded across the major scanning sources.

Regulatory Verification Notes

The site offers no licensing, registration or regulatory disclosure, and no corporate identity could be tied to it. For a site that invites the public to buy a token pre-launch, such a gap carries weight. It is not the cause of the cautionary conclusion, which rests on the reputational and behavioural findings above. No third-party broker or regulatory-database entry matched this site. That absence is neutral and neither validates nor condemns it. The valid transport encryption is a basic hygiene control. It confirms only that the connection is encrypted, not that the operator is trustworthy. Evidence:

• Homepage: no operator name, licence, registration number or legal terms were identified.
• Transport encryption: the TLS certificate was issued by WE1 at domain-validation level only, valid to 2027-01-10.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any independent check should begin with the token itself. Confirm whether the token exists on a recognised public registry or exchange listing, and whether a named issuer publishes a whitepaper, audit or smart-contract address that can be cross-checked outside this site. Look for a registered legal entity and any securities or virtual-asset authorisation in the jurisdiction of the intended buyer. Official social and support channels should be confirmed through an independent, offline route and not through links on the page. Evidence:

• Homepage: the advertised presale carries no issuer, contract address or audit reference to check.
• Reputation: independent scanners currently list the domain adversely, so any check should be repeated before engagement.
• Provenance: the domain's short history gives no established track record to rely on.

Summary Verdict

The available evidence supports an elevated-risk classification. Confirmed adverse reputation, concealed form behaviour and the absence of any accountable operator converge. The few hygiene positives do not offset these findings. The site is not assessed as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall. All observed addresses are edge servers, and the origin host was not observable. This is a mitigating factor only. It shows ordinary, mainstream hosting on a free Pages subdomain and offers no assurance about the operator. Edge-only visibility also prevents independent verification of the underlying host and can mask rapid content changes.

Closing Assessment

The site should be treated as unsafe for anything beyond passive viewing. Account creation, login, credential entry, token purchases and any payment or wallet interaction should be avoided. If the site was reached through an unsolicited message or advertisement, the referral should be reported and any details already submitted should be treated as compromised.