Is polyperps.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is hosted on a free Cloudflare Pages subdomain, and its name suggests a perpetual-futures (leveraged derivatives) trading front end. When the analysis captured the homepage, the only content returned was a short interstitial page titled as a suspected-phishing warning from the hosting platform's security layer. That page replaced the site's own content, so the site's products and claims could not be read. Its apparent purpose is a crypto-trading interface that was gated or flagged at the platform level.

Scam/Impersonation Risk

This site shows confirmed adverse contradictions. Several major security vendors currently flag the domain as malicious, and the combined external detections are strong enough to count as a confirmed blacklisting. The detections are not attributed to a specific malware or phishing class, but their weight is decisive and the hosting platform's own warning page points the same way. No conflicting legal entities were found, so there is no identity contradiction. No contact-channel anomaly was published. The sandbox found no wallet-drainer behaviour, clipboard manipulation, hidden forms or credential posts to non-whitelisted hosts. Those clean results come from a session that was largely met by a bot challenge, so they do not offset the reputation findings. Because the name points to leveraged trading, a wallet or deposit flow behind the challenge would be a likely monetisation point, but no such flow was observed. Evidence:

• Homepage capture returned an access-denied bot-challenge response, with a page title warning of suspected phishing and only a few hundred characters of text.
• Multiple independent security vendors rate the domain malicious, including three top-tier vendors, and a critical external-detection threshold was exceeded.
• Behavioural sessions recorded very heavy third-party request traffic (about 95% external share at peak, 26 external background requests, 4 external POSTs), all to whitelisted hosts, plus 17 console errors.
• No wallet-connect, clipboard-write, hidden-form or external password-form activity occurred in any of three completed sandbox runs.

Regulatory Verification Notes

No legal, terms, privacy or about page could be read, because the challenge blocked capture. The report therefore cannot describe the site's licensing, corporate registration or disclosures. Any real-world operator remains unconnected to the site through independent evidence. No third-party broker profile matched the domain, which gives neither a positive nor a negative reputational signal. For a platform offering leveraged derivatives, a registered operating entity and a licence from a financial regulator would normally be expected. On a flagged domain, those must be established independently. The sandbox did confirm valid transport encryption, but that shows only an encrypted connection, not the operator's legitimacy. Evidence:

• Homepage capture was blocked, so no legal-entity name, licence or registration number could be extracted from any page.
• Served from AS13335 (Cloudflare, Inc., US), registry ARIN.
• TLS certificate issued by WE1 (DV, domain-validated only), valid to 2026-12-23.
• No broker-database match was found for the domain name.

What to Verify Next

The domain should not be treated as a trading venue until its operator is identified through channels independent of this site. Where the project claims a brand, the verification steps are to find its official domain through the brand's verified social profiles or regulator registers, and to check that this subdomain is not presented as official. Any claimed licence should be confirmed in the relevant regulator's own public registry. Official support contacts should be confirmed offline. If the site is one the reader controls or is responsible for, the page and deployment should be audited for compromise and the platform's review process should be requested. Evidence:

• The only observed page content is a platform warning, not the operator's own material.
• The domain is a shared-platform subdomain, so the domain itself reveals nothing about who operates it.
• No licensing or entity information was available to cross-check.

Summary Verdict

The overall posture is high risk. External threat detections are decisive, and they cannot be offset by the valid certificate or the clean sandbox behaviour. The site is not suitable for any sensitive interaction in its current state.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses (two IPv4, two IPv6) are Cloudflare edge servers, and the origin server was not observable. The bot protection that blocked capture is part of this stack. Such infrastructure is a mitigating factor only. It does not verify the operator, and it cannot offset the reputation findings. The edge-only view also means the hosted content can change without any visible change in network identity.

Closing Assessment

The site should not be used for login, wallet connection, deposits or any financial activity, and nothing should be downloaded from it. If the site must be viewed at all, that should be done read-only, from an isolated environment. Anyone who reached it through a shared link should treat the sender's message with suspicion.