Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
dreambot.info is low-trust and potentially risky.
| What this site appears to be | Official-looking site for DreamBot, a Java-based game automation client. Offers a single .jar download, script hub with free and paid scripts, setup instructions, and notes about account bans due to TOS violations. No forms or payment flow visible in provided content. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 2 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 2006585 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2006.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
DreamBot is a software-download website presenting a Java-based game-automation client, a script hub containing free and paid scripts, setup instructions, and support for Windows, macOS, Linux, and headless VPS use. Its apparent business model is distribution of the client and monetisation through script sales or marketplace activity.
Scam/Impersonation Risk
The site presents a coherent software product rather than a financial scheme, and the supplied page analysis found no login form, payment flow, hidden form, wallet connection, or clear brand-impersonation indicator. However, the domain is subject to a confirmed blacklist finding, which is a decisive contradiction for sensitive interaction. Provenance is also inconsistent: current registration telemetry places the domain’s registration in 2026, while historical records show the domain captured from 2006 through 2025. That discrepancy does not establish who operates the site, but it materially weakens confidence in the current deployment. The downloadable Java archive and third-party scripts create an additional need for independent validation before execution, particularly because the site itself notes that automation may result in game-account bans for terms-of-service violations.
- The homepage describes DreamBot as a Java automation client and offers a single `DreamBot.jar` download, script-hub access, and headless VPS operation.
- External reputation evidence records a confirmed blacklist finding; separate detection results include one malicious and one suspicious classification.
- Domain registration telemetry records creation on 2026-08-13, approximately 0.17 years before collection.
- Historical records contain 585 snapshots spanning 2006–2025, with 20 years tracked, creating a material current-registration versus historical-presence inconsistency.
Regulatory Verification Notes
The available content does not independently verify the real-world operator, and no licensing authority or registration number is presented for the software business in the supplied material. This is a transparency and identity-verification gap rather than proof of unlawful activity. The site’s stated service is software distribution, not a regulated financial offering, but the absence of an identifiable operator limits accountability for the client, paid scripts, and any associated marketplace transactions. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com; registration information should be treated as administrative evidence, not as proof that the publisher is the responsible operator.
- The homepage identifies the product as “DreamBot” and describes a Java client, open Java API, script hub, and setup process, but does not provide an independently verified legal operator in the supplied content.
- The stated business model involves free and paid scripts, while the captured content shows no visible payment or merchant-identification flow.
- The site’s hosting infrastructure is identified as AS47583, AS-HOSTINGER — Hostinger International Limited, CY.
- The site uses a DV TLS certificate issued by YE2, valid until 2027-01-10T21:41:01+00:00.
- DeFi recognition is not applicable; no DeFiLlama listing or TVL/market-cap data is present.
What to Verify Next
Before executing the client or purchasing scripts, an enterprise or regulated user should obtain the publisher’s legal identity, verify that identity through an independent channel, and obtain a cryptographic hash or publisher signature for the Java archive from a separate trusted source. The archive should be inspected and tested in an isolated environment, with outbound activity and file changes monitored. The stated automation functionality should also be assessed against the relevant game’s terms of service, and any paid transaction should use a payment method with dispute and buyer-protection mechanisms.
- The setup guidance instructs users to download and run a Java archive rather than an installer, increasing the importance of independent file-integrity validation.
- The homepage states that the client can run scripts unattended, on Windows, macOS, Linux, or a headless VPS.
- The page summary states that the site notes possible account bans arising from terms-of-service violations.
- The supplied page analysis found no sensitive forms or visible payment flow, so transaction and support-channel verification cannot be completed from the captured interaction alone.
Summary Verdict
The overall posture is low trust with elevated risk for sensitive interaction. The site appears technically coherent and presents a plausible software product, but the confirmed blacklist contradiction, unresolved operator identity, and provenance inconsistency prevent the available evidence from supporting trusted execution, credential submission, or financial engagement.
Infrastructure Integrity
The site resolves directly to infrastructure associated with Hostinger International Limited in Ukraine, using AS47583, with no trusted CDN or WAF layer identified and likely origin addresses visible. Its DV TLS certificate provides transport encryption, but that protection confirms encrypted delivery only and does not establish publisher legitimacy; the hosting posture therefore offers limited mitigation against the external reputation concern.
Closing Assessment
The appropriate posture is to avoid sensitive interaction and refrain from executing or purchasing software from the site unless the publisher, file integrity, and transaction arrangements have been independently validated.
Written analysis generated 2026-10-16 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, external reputation, registration and ownership, page content.
01 Governance
- What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified.Governance
rule:gov_business_model_cap
02 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
04 Page content
- The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META - The page carries none of the structured previews for search and social sharing that established sites usually provide.Page content
rule:PAGE_SEO_NO_STRUCTURED
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of dreambot.info.
- The request stayed on dreambot.info. It was not redirected to another domain. Clear
- Registration is published under PDR Ltd. d/b/a PublicDomainRegistry.com. Clear
- DNS for this domain is served by dns-parking.com, across 2 name servers. Noted
- The registration is paid up to 2027-08-13. Noted
- The earliest public archive of this site is from 2006-12-09. Clear
- It is hosted on AS-HOSTINGER, from a server in UA. Noted
Domain intelligence
| Registrar | PDR Ltd. d/b/a PublicDomainRegistry.com |
|---|---|
| Hosting | AS-HOSTINGER - Hostinger International Limited, CY |
| Country | UA |
| Server IP | 2a02:4780:43:7713:3911:dd2e:43a5:e80f |
| Name servers | atlas.dns-parking.com, hyperion.dns-parking.com |
| CDN / edge network | Not detected |
| Resolved IP addresses | 5 |
| Edge IP addresses | 0 |
| Likely origin IP addresses | 5 |
| SSL issuer | YE2 |
| SSL expiry | 2027-01-10 |
| Domain age | 0.17 years (continuous registration) |
| Domain expiry | 2027-08-13 |
| Archive first seen | 2006-12-09 |
| Archive snapshots | 585 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about dreambot.info at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.