Is dreamcash.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Dreamcash is a recently launched website at a ".pro" domain. Its homepage is titled with a live-style Bitcoin price headline under the "Dreamcash" name, which points to a cryptocurrency-oriented or cash-themed financial service. The captured homepage gives no clear picture of the operator, the products offered or the business model, so the precise service on offer cannot be established from the evidence.

Scam/Impersonation Risk

The site shows hard contradictory signals. Several major security vendors currently flag the domain as malicious, and a separate external blacklist corroborates this. The domain is therefore treated as blacklisted. Two further concerns sit alongside the listings. The domain is only a few months old, and the web archive holds a single capture, so there is no record of long-running benign operation to offset the listings. The site also makes a large volume of third-party requests that fall outside commonly recognised, trusted services. In the observed sessions most outbound traffic went to external destinations. Part of it consisted of data submissions to unrecognised endpoints, and the page produced a heavy stream of script errors, a pattern typical of hastily assembled or unstable front ends. In mitigation, the sandbox observed no wallet-draining behaviour, clipboard tampering, hidden forms, credential posts to external hosts or content cloaking. No brand impersonation or conflicting legal identities were observed. The risk here rests on external threat listings and behavioural anomalies, not on a demonstrated impersonation. Evidence:

• The domain was registered in 2026 (about 0.35 years old), which is very young for a site presenting a financial theme.
• The web archive holds 1 snapshot, captured 2026-07-04, so there is effectively no historical track record.
• On the homepage, about 36 external background requests and 12 external data submissions were recorded, including 18 requests and 3 submissions to destinations outside the recognised-service allowlist.
• Seven security engines rated the domain malicious and four rated it suspicious. Three of these are major-tier vendors.

Regulatory Verification Notes

No licence, registration number or regulatory standing could be tied to this site, and no independent regulator or broker-database record was matched. Ownership and governance opacity are present, so the real-world operator cannot be connected to any identifiable company or individual. Identity is therefore unverified. Opacity of this kind is not an identity contradiction on its own, but it removes any accountability a user could otherwise rely on. A crypto-themed or financial-style offering without verifiable authorisation carries elevated consumer risk, and this compounds the threat listings. The site does use a valid, currently unexpired encrypted connection. That confirms only that traffic is encrypted, not that the operator is trustworthy. Evidence:

• The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-06-26.
• The site is served from AS13335 (Cloudflare, Inc., US).
• The TLS certificate was issued by WE1 as domain-validated (DV) only, valid to 2027-01-22. DV certificates carry no organisational identity checks.
• No regulator, broker-database or licensing match was found for the domain.

What to Verify Next

Before any engagement, the operator's identity and authorisation should be established independently of the site. That means searching the relevant financial-services and crypto-asset registers for a named, licensed entity matching the Dreamcash brand. Any company name, address or licence number the site cites should be confirmed with the issuing authority through an official channel. Any claim of affiliation with a known exchange or platform should be tested by contacting that platform through its own published channels. Official support and contact details should also be confirmed offline or through independent sources. Because the site is flagged, a fresh review of its listing status is worthwhile before any reconsideration. Evidence:

• The homepage presents a Bitcoin price headline but identifies no registered operator.
• Threat listings are active now, so the site's status should be re-checked before any reassessment.
• The archive shows only one capture, so no earlier site version is available for comparison.

Summary Verdict

The overall posture is high risk. Active external threat detections are decisive, and the site's youth, sparse history, unverified operator and anomalous outbound behaviour reinforce them. The site's technical hygiene does not offset the reputation risk. Available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and all observed addresses are CDN edge servers. The origin host is not observable, so hosting cannot be independently verified, and content could be swapped rapidly behind the edge. This infrastructure is a mitigating factor only. It reflects a mainstream, reputable provider and says nothing about the legitimacy of the site's operator, and it cannot offset the external threat listings.

Closing Assessment

Interaction should be limited to passive viewing, if the site is visited at all. Logging in, supplying credentials, connecting wallets or making deposits, payments or other financial commitments should be avoided. Any funds or accounts already linked to the site should be reviewed and secured promptly.