--- title: "Is puep.fun a Scam? Trust Score 0/100" source: TrustSniffer type: Website trust & fraud report subject: "puep.fun" verdict: "Critical Risk" title: "Is puep.fun a Scam? Risk Report, Score 0/100" trust_score: 0 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/puep.fun assessed: 2026-10-25 --- # Is puep.fun a scam? TrustSniffer's high-risk assessment: 0/100 ## Verdict **Verdict: Critical Risk, trust score 0/100.** puep.fun shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-25 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 4 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear | | Domain age | 1.9 years old (Registered history) | Clear | | Web archive | Archived since 2024 (7 snapshots) | Clear | | Certificate | Encrypted connection (Issued by WE1) | Noted | ## The page as captured ![Screenshot of the puep.fun homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/puep.fun/screenshots/first.png) _What puep.fun served when TrustSniffer captured it on 2026-10-25. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: 1 to 3 years (registration continuity). - Public web-archive history exists since 2024. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This is a recently registered website on the ".fun" top-level domain. The analysis could not retrieve its real content. The only page captured was a Cloudflare interstitial titled "Suspected Phishing", returned with an access-denied status. That page contained very little text, so the site's products, services and business model could not be determined from what it presented. The page gave no identifiable brand or operator. ### Scam/Impersonation Risk This site carries **confirmed adverse reputation signals**. It is currently blacklisted by multiple independent security-intelligence sources, several of which classify the domain as malicious rather than merely suspicious. That convergence is the decisive factor in the assessment. Hosting behind a mainstream CDN, a valid certificate and a Cloudflare challenge layer do not offset it. The Cloudflare warning page that stood in for the site's content points the same way and should be read as a corroborating signal, not an independent confirmation. No brand impersonation or conflicting legal identities were observed, because no identity content could be reviewed. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms or credential posts to external hosts. Those were absent in the limited content that rendered, which is not evidence that the site is benign. The browsing sessions did show heavy third-party traffic: more than a hundred external background requests, with nearly all activity directed to outside hosts. They also showed several external POST submissions, repeated console errors, and a large burst of page-structure changes after interaction. Together these suggest a script-driven page that loads most of its behaviour from elsewhere. The domain's registration history also shows a discontinuity. Archive captures date to late 2024, well before the current registration, which is consistent with a lapsed domain that was re-registered. That pattern is common when expired domains are repurposed, though the evidence does not show what the earlier content was. Evidence: - Homepage: the only content captured was a Cloudflare interstitial titled "Suspected Phishing", returned with an HTTP 403 status and about 381 characters of text. - Reputation checks: four malicious and two suspicious verdicts from multiple security engines, with an external blacklist hit confirmed. - Domain provenance: registered 2026-09-02 (about 52 days old), while the web archive holds 7 snapshots spanning 2024–2026 (3 years tracked), with the earliest capture in November 2024. - Behavioural sandbox, 3 runs: 122 external background requests, 5 external POSTs, 10 console errors and 1,508 page mutations after interaction. ### Regulatory Verification Notes The content reviewed contained no legal, terms, privacy, about or licensing pages, so no regulatory status or corporate identity could be assessed. No third-party broker or regulator profile matched this domain, and no independent link between the site and any real-world brand or person could be established. The site therefore cannot be treated as a regulated or licensed financial service on the available evidence. Its registration was made through the Dynadot registrar and is recent. Under the current adverse reputation findings, any regulatory or licensing claim the site might later make would carry no assurance without independent confirmation. Evidence: - Registration: Dynadot LLC registrar; created 2026-09-02, expiring 2027-09-02. - Transport security: the TLS certificate was issued by WE1 with domain-validation (DV) only, valid to 2026-12-01, which confirms encryption but not operator identity. - Hosting: served from AS13335 (Cloudflare, Inc., US). - No broker or regulator database entry matched the domain. ### What to Verify Next Any contact with this site should first be checked against an independent, offline route to the supposed operator. Prospective users should confirm that the claimed brand or business exists and that its official domain is this one, using regulator registers and the organisation's known official channels, not links or details taken from the site. If the domain appeared in an unsolicited email, message, advertisement or social post, the sender should be verified separately and the message reported. Site owners or administrators who believe the listing is mistaken should check whether the domain was re-registered after a previous holder, and should request re-evaluation with the security vendors that list it. Evidence: - Reputation: the confirmed blacklist and malicious detections make independent confirmation of the operator a precondition for any engagement. - Provenance: archive captures that predate the current registration suggest the domain's earlier use should be checked against the present operator. - No official support or contact channel was available to confirm. ### Summary Verdict The overall posture is high risk. The site's reputation has been compromised by confirmed third-party detections, and its recent registration and absent identity disclosures leave nothing credible to counterbalance them. The available evidence does not support treating it as legitimate for any sensitive purpose. ### Infrastructure Integrity The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers, with no origin server visible. That is a mildly mitigating factor, since the infrastructure is mainstream and the certificate is valid. It does not offset the reputation findings. Edge-only visibility also prevents independent verification of where the content is actually hosted, and it can mask rapid content changes. ### Closing Assessment The site should not be used for login, credential entry, payments or any financial interaction, and nothing should be downloaded from it. At most, cautious read-only viewing in an isolated environment is acceptable. Anyone who has already submitted credentials or funds should change affected passwords and contact their bank or payment provider immediately. _Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by external reputation, hosting and network, behaviour in a sandbox, registration and ownership. ### 01 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 02 Hosting and network - The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`) ### 03 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The structure of the page changed sharply while it was loading. (Behaviour in a sandbox `rule:BEHAV_DOM_DENSITY_SPIKE`) ### 04 Registration and ownership - The registration record withholds contact details for the operator. (Registration and ownership `rule:KF_WHOIS_HIDDEN`) - Registration details are held behind a privacy service, so no operator is named publicly. This is common and legal, and it also means there is nobody to check. (Registration and ownership `rule:KF_WHOIS_PRIVATE`) ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 15% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of puep.fun. - The request stayed on puep.fun. It was not redirected to another domain. (Clear) - Registration is published under DYNADOT LLC. (Clear) - DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted) - The registration is paid up to 2027-09-02. (Noted) - The earliest public archive of this site is from 2024-11-27. (Clear) - It is hosted on CLOUDFLARENET, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | DYNADOT LLC | | Hosting | CLOUDFLARENET - Cloudflare, Inc., US | | Country | US | | Server IP | 2606:4700:3035::ac43:9c13 | | Name servers | aiden.ns.cloudflare.com, gracie.ns.cloudflare.com | | CDN / edge network | Detected (cloudflare) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | WE1 | | SSL expiry | 2026-12-01 | | Domain age | 1.91 years (continuous registration) | | Domain expiry | 2027-09-02 | | Archive first seen | 2024-11-27 | | Archive snapshots | 7 | | Reputation | VirusTotal: 4 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about puep.fun at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [pump-strem.fun](https://trustsniffer.com/report/pump-strem.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [foxmeta.fun](https://trustsniffer.com/report/foxmeta.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [dev-drop.fun](https://trustsniffer.com/report/dev-drop.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [groksol.fun](https://trustsniffer.com/report/groksol.fun), another .fun site assessed as critical-risk (Critical Risk, 5/100) - [playkintara.fun](https://trustsniffer.com/report/playkintara.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [pumprewards.fun](https://trustsniffer.com/report/pumprewards.fun), another .fun site assessed as critical-risk (Critical Risk, 5/100) - [bullseyesonsol.fun](https://trustsniffer.com/report/bullseyesonsol.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [token-reward.fun](https://trustsniffer.com/report/token-reward.fun), another .fun site assessed as critical-risk (Critical Risk, 0/100) - [wagyu-swap.com](https://trustsniffer.com/report/wagyu-swap.com), another site assessed as critical-risk (Critical Risk, 0/100) - [pumpfunlivestream.pro](https://trustsniffer.com/report/pumpfunlivestream.pro), another site assessed as critical-risk (Critical Risk, 5/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) - [Crypto Scam Websites in 2026: What a List Misses](https://trustsniffer.com/blog/crypto-scam-websites-2026-what-a-list-misses) --- *Source: [TrustSniffer](https://trustsniffer.com/report/puep.fun) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/puep.fun · assessed 2026-10-25.*