Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
flarenetwork.lol shows high-risk / scam indicators.
| What this site appears to be | Doppler Finance is a DeFi yield platform offering vaults for XRP and RLUSD and institutional yield products, with a governance vote on yield distribution and a planned lending feature. Its disclaimer states the products are not registered securities and that yields are illustrative, but no audit, licensing, or legal-entity evidence appears in the visible content. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 5 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
| Hosted by | CLOUDFLARENETServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
Doppler Finance, served from the domain flarenetwork.lol, presents itself as a DeFi yield platform. Its homepage offers deposit vaults for XRP and RLUSD, an "Institutional Vault" marketed as yield-as-a-service, a lending product labelled "coming soon", and a community governance vote on how protocol yield is split between depositors and liquidity providers. The apparent business model is that users connect an EVM or XRP wallet, deposit digital assets, and receive protocol yield, with a points-style incentive (+200 XP per governance vote) to drive engagement.
Scam/Impersonation Risk
This is the most serious section of the assessment, because contradictory signals are present. Multiple independent threat-intelligence engines currently flag the domain as malicious or suspicious, and the domain is treated as confirmed blacklisted. A decentralised-finance product whose entire value proposition is taking user deposits cannot be reconciled with that reputation. No conflicting legal-entity names were found, and no brand impersonation was detected. The sandbox saw no credential forms and no hidden forms. It also saw no outbound posts to non-allowlisted destinations, no wallet-drainer behaviour and no clipboard manipulation across three runs. These benign behaviours do not offset the external detections. The domain name itself does not correspond to the "Doppler Finance" brand displayed on the page, and nothing on the site explains that mismatch. The site is a deposit-before-service model: funds are committed first, and the page gives no audit, no named operator, and no fee or revenue mechanism to show where the yield comes from. Its own disclaimer says the offerings are "not registered under any securities laws", that yield figures are "illustrative", and that rewards are "not guaranteed". That language disclaims accountability for exactly the claims the vaults are built to attract. Together with the unverifiable yield source, this makes the visible product claims impossible to substantiate. Evidence:
- Homepage: XRP and RLUSD vaults and an institutional yield product, with no audit, fee mechanism or revenue source disclosed.
- Homepage governance module: a wallet connection (EVM or XRP) is required to vote, with a +200 XP reward for any option chosen.
- Homepage disclaimer: states that products are unregistered, yields are illustrative, and returns are not guaranteed.
- Domain registered 2026-09-23 (~25 days old, under one month), so the domain has no operating history.
Regulatory Verification Notes
The homepage names no legal entity, licence, registration number, regulator or jurisdiction, and the visible content points only to external documentation for terms, privacy and disclaimers. The domain's ownership details are incomplete, which is ownership opacity and is not an identity contradiction. The platform asks users to commit funds, so the absence of any verifiable operator or regulatory standing is material here. No third-party broker or regulator record was matched for this brand. The identity of the real-world operator therefore remains unverified, and no legitimacy can be inferred from the site's own statements. The valid transport encryption is only a baseline hygiene factor and says nothing about the operator. Evidence:
- Homepage and footer: the disclaimer and links to Docs, Terms of Service and Privacy Policy appear, but no operator name, licence or registered address does.
- Registered through Eranet International Limited, with an expiry of 2027-09-23.
- TLS certificate issued by YE1 (domain-validated only), valid to 2026-12-23, which confirms encryption but not who runs the site.
- Served from AS13335 (Cloudflare, US).
What to Verify Next
Any dealings should be treated as unsafe for deposits until the operator is independently established. The relevant steps are to confirm through an independent route whether a legal entity called Doppler Finance exists and holds any authorisation for custody or yield products. The official domain should also be identified from a source outside this site, so that it can be compared with flarenetwork.lol. A published smart-contract audit by a recognised reviewer should be sought, together with an explanation of how the yield is generated and who bears the risk. The official support and contact channels should be confirmed through an independent, offline route. Evidence:
- Homepage: no named audit firm, entity or contract addresses are visible.
- Homepage product claims: the institutional "yield-as-a-service" offering and the coming-soon lending product have no stated counterparties or terms.
- The domain's registration is weeks old, so no long-standing record exists to anchor the brand to this address.
Summary Verdict
The overall posture is high-risk and clearly cautionary. External threat detections that infrastructure protections cannot offset, a very recent domain, and an unauditable deposit-based yield model converge on a conclusion that the site is unsuitable for any sensitive or financial interaction. Its polished presentation and clean sandbox behaviour do not change that conclusion.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers. The origin server was not observable, so the real hosting location cannot be independently verified, and edge-only visibility can mask rapid content changes. The domain is young and has sparse subdomains, an unconfirmed heuristic flag. The protective infrastructure is a mitigating factor only and does not offset the reputation findings.
Closing Assessment
At most, the site should be viewed read-only. No wallet should be connected, no assets deposited, and no governance vote or credential submission attempted, since each wallet approval could expose funds. Anyone who has already interacted with the site should review and revoke any wallet permissions granted.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, page content, hosting and network.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of flarenetwork.lol.
- The request stayed on flarenetwork.lol. It was not redirected to another domain. Clear
- Registration is published under Eranet International Limited. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-23. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Eranet International Limited |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3031::6815:3c44 |
| Name servers | KARINA.NS.CLOUDFLARE.COM, YEW.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2026-12-23 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-23 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 5 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about flarenetwork.lol at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.