Is defilending-pool.cc a scam? TrustSniffer's high-risk assessment: 11/100

Overview

This website is a single-page presence titled "Defi" on a domain name that evokes a decentralised-finance lending pool. The captured homepage carries only a few hundred characters of text. It presents no detailed product description, so its apparent purpose is to pose as, or front, a DeFi lending or pooling service. Its commercial model cannot be confirmed from the page content.

Scam/Impersonation Risk: Contradictory signals are present. The domain is blacklisted by external reputation sources, with at least one detection engine flagging it as malicious and others as suspicious. The site is also classed with a high-risk archetype, and the combination of reputation hits and an extremely young domain triggered the impersonation guard in the analysis. No conflicting legal entities, brand-impersonation text, or confirmed phishing forms were observed on the captured page. The sandbox behaviour was also benign: three stable runs with no external network calls, no wallet interaction, no clipboard manipulation, no hidden forms and no cloaking. This quiet behaviour is a mitigating observation only. It does not offset the blacklist hit. A DeFi-themed name on a weeks-old domain with a thin landing page matches the pattern of throwaway sites used to stage fund-collection or wallet-related lures, which can be activated after the initial capture. Evidence:

Regulatory Verification Notes: The captured homepage names no operating company, jurisdiction, licence, registration number, or terms and legal pages. The on-page disclosure position is therefore unclear, and no regulator-backed status could be associated with the domain. Real-world operator identity is unverified. Nothing in the evidence connects the site to any known brand, protocol or person. A DeFi-branded site that offers lending or pooling would ordinarily be expected to disclose a responsible entity and risk terms. This is a verification gap rather than proof of wrongdoing, but here it sits alongside the confirmed reputation hit. No third-party broker or regulatory-database record matched this domain. Evidence:

What to Verify Next: Before any engagement, an independent party should confirm whether a real DeFi lending protocol exists under this name, using its officially published channels rather than links from this site. Any claimed operator should be matched against a corporate registry and the relevant financial regulator's licence register. Official support and social channels should be confirmed through an offline or independently sourced route. Any smart-contract addresses the site references should be checked in a public blockchain explorer for deployment date, audit history and ownership before any asset is approved or sent. If the site is already known to staff or customers, its address should be reported to the organisation's security team and to the hosting provider's abuse desk. Evidence:

Summary Verdict: The overall posture is clearly cautionary and security-forward. Confirmed adverse reputation, an extremely recent domain and an unverified operator outweigh the benign sandbox behaviour and the ordinary transport-encryption hygiene. Available evidence does not support treating this site as a legitimate financial service, and the risk is elevated for any sensitive interaction.

Infrastructure Integrity: The site is served from Amazon's network (AS16509, AMAZON-02, US, ARIN registry) behind AWS CDN/WAF infrastructure. The single observed IP address is an edge node, and the origin server is not visible. This is a mitigating factor only. It offers no assurance of legitimacy, and edge-only visibility makes it harder to verify hosting independently or to detect rapid content swaps. The unconfirmed heuristics of a young domain with a sparse subdomain footprint are consistent with the broader picture but are not independent confirmed risks.

Closing Assessment: The site should be treated as unsuitable for login, credential entry, wallet connection or any financial transaction. If it must be examined, this should be done read-only from an isolated environment, and it should be reconsidered only if a reputable independent source later clears the domain and confirms the operator.

• The homepage, titled "Defi", returned only about 400 characters of text and no product or company detail.
• External reputation sources flagged the domain: one malicious and two suspicious detections, with the aggregate result treated as a confirmed blacklist hit.
• Domain registered 2026-08-19 (~0.18 years, about 67 days old) through Gname.com Pte. Ltd.
• Sandbox runs on the homepage showed 0 external requests, 0 console errors, no cloaking, and 3 of 3 successful runs.
• The homepage shows no legal entity, licence, registration identifier or jurisdiction.
• The site is not recognised as a listed protocol in the DeFiLlama directory, so no TVL can be cited.
• The TLS certificate is issued by YE2 at DV (domain-validated) level, valid to 2027-01-16. This establishes only that the domain is encrypted, not who operates it.
• The domain registration runs to 2027-08-19, a single year ahead of the 2026-08-19 creation date.
• The homepage gives no contract address, audit reference, team or registry identifier that could be checked in the existing evidence.
• The site's age of about 67 days means there is no established public track record to compare against.
• The external detections mean the domain should be treated as untrusted until a reputable source clears it.