Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
based.asia shows high-risk / scam indicators.
| What this site appears to be | Doppler Finance is a DeFi yield protocol offering XRP and RLUSD vaults, an institutional yield-as-a-service product, and a community governance vote on how yield is split between depositors and liquidity providers. The page includes a disclaimer stating that its products are not registered securities, that yield figures are illustrative, and that rewards are not guaranteed, but it shows no audit, legal entity, or verifiable yield-source details. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20132 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2013.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Doppler Finance, shown under the domain based.asia, is a single-page DeFi yield-protocol landing site. It offers an XRP Vault, an RLUSD Vault, an Institutional Vault marketed as "yield-as-a-service", and a lending product labelled "coming soon". It also hosts a community governance vote on how protocol yield is divided between depositors and liquidity providers, with an "Enter App" entry point. Its apparent business model is taking user-deposited crypto assets into vaults and earning from the resulting yield, with a separate institutional service line.
Scam/Impersonation Risk
Contradictory signals are present and are the decisive factor in this assessment. Two independent reputation engines currently flag the domain as malicious, and a further external blacklist listing corroborates them, so the domain is blacklisted by third-party sources. No brand impersonation, conflicting legal identities, or confirmed phishing page was identified. The site's own code and behaviour were clean in testing: no outbound data posts, no wallet-drainer or clipboard-hijack behaviour, and no hidden forms. These results lower the probability of an active drainer on the page but do not offset the blacklisting. The business-model signals reinforce the caution. The homepage requires a wallet connection (EVM or XRP wallet) before a governance vote can be submitted, and it rewards each vote with "+200 XP", an engagement incentive that draws visitors into wallet interaction. The vote options themselves, "Depositor Priority" and "LP Priority" (each 60% of yield to one side) and "Equal Split", imply that yield is distributed by a mechanism the page never explains. Deposits come first and service second, and the fee or revenue split is not stated anywhere in the visible text. The domain name "based.asia" also has no visible connection to the "Doppler Finance" brand displayed on the page, and no public DeFi protocol directory recognises the protocol.
- Homepage governance module: wallet connection is required to vote, and each vote earns "+200 XP". Three yield-split options are offered, with no explanation of how yield is generated or settled.
- Homepage product listing: the XRP Vault, RLUSD Vault and Institutional Vault involve depositing assets before any service or return is delivered, and no fee schedule or yield source is stated.
- Domain registration record: registered October 2026 (~0.04 years old) through Spaceship, Inc., expiring October 2027.
- Web-archive history: only 2 snapshots, spanning 2013–2026 (14 years tracked). They do not establish continuous operation of the current service.
Regulatory Verification Notes
The homepage carries a disclaimer stating that its reward structures are not financial products and are not registered under any securities laws. It also says yield figures are illustrative and based on historical data, that rewards are not guaranteed, and that use is at the user's own risk. It refers readers to separate Terms of Service, Privacy Policy and Disclaimer documents. The visible page names no legal entity, company address, licence or registration number, and it links to no audit report or verifiable yield methodology. It claims no regulatory authorisation, and no third-party broker or regulator record matched this brand, so no licensing position can be assumed. Identity remains unverified. The disclaimer is also written in a way that distances the operator from responsibility for the very yield products it markets. This is a disclosure gap, and it compounds the reputational listing without being a verdict on licensing.
- Homepage footer disclaimer: yield figures are described as "illustrative", rewards as "not guaranteed", and the products as not registered under securities laws.
- Homepage and navigation: no operating company, jurisdiction, licence number or audit reference is shown. Legal terms are deferred to external documentation.
- Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: the TLS certificate was issued by YE1 at the DV (domain-validation) level and is valid to 2027-01-04. DV confirms control of the domain only, not the operator's identity.
What to Verify Next
The first step is to establish who legally operates the protocol. The operator should be identified through an independent registry or corporate-records search, and any licence or registration claimed in the linked terms documents should be confirmed directly with the relevant authority. Next, the vault smart-contract addresses and any security audits should be located through channels reached independently of this domain, such as the project's verified social accounts or a reputable on-chain explorer. The documented yield mechanism and fee split should be confirmed against what the contracts actually do. Finally, the official support and contact channels, and the link between the Doppler Finance brand and this domain, should be confirmed through an independent route.
- Homepage resource links (Docs, Discord, Telegram, X): these are the only channels offered, and the page itself provides no way to authenticate them.
- Homepage product listing: the Institutional Vault and its "yield-as-a-service" offer give no counterparty, custodian or contract details.
- Homepage footer: the Terms of Service and Disclaimer are referenced but not reproduced on the page.
Summary Verdict
The available evidence supports a high-risk, clearly cautionary posture. Third-party malicious listings, a brand-new current registration and a deposit-first yield model with no verifiable operator converge on that conclusion. The clean on-page behaviour and the professional presentation do not change the overall assessment.
Infrastructure Integrity
The site is delivered through a recognised CDN and web-application firewall, with a valid TLS certificate and four edge IP addresses observed. The origin server was not observable, so independent verification of the actual hosting is not possible. The domain's DNS footprint is sparse and young. This protective infrastructure is a mitigating factor only. It guards against ordinary network-level attacks, but it cannot offset the reputational listings, and it also makes rapid content changes harder to detect.
Closing Assessment
Treat the site as read-only. Do not connect a wallet, deposit assets, submit credentials, or take part in the governance vote or XP programme until the operator's identity, the contract addresses and the blacklisting have been independently resolved.
Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by page content, hosting and network, registration and ownership, external reputation.
01 Page content
- The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
02 Hosting and network
- The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 Registration and ownership
- The registration record withholds contact details for the operator.Registration and ownership
rule:KF_WHOIS_HIDDEN
04 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 30% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of based.asia.
- The request stayed on based.asia. It was not redirected to another domain. Clear
- Registration is published under Spaceship, Inc.. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-06. Noted
- The earliest public archive of this site is from 2013-05-04. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Spaceship, Inc. |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3030::6815:3732 |
| Name servers | tadeo.ns.cloudflare.com, malavika.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-04 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-06 |
| Archive first seen | 2013-05-04 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about based.asia at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.