Is hodlhodldesktop.com a scam? TrustSniffer's high-risk assessment: 10/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presents itself as the Windows desktop companion for HODLHODL, a non-custodial peer-to-peer Bitcoin trading platform. Its landing page promotes direct person-to-person Bitcoin trades, a unique multisig escrow address generated for each trade, use of the visitor's own wallet, and Lightning settlement. The business model is transaction fees split between buyer and seller and deducted from the Bitcoin amount, with fee levels deferred to an FAQ.

Scam/Impersonation Risk

The decisive contradiction is a confirmed blacklist listing. An external threat-intelligence detection currently flags the domain, and its precise nature is not specified. Nothing on the site offsets this finding. No phishing behaviour, wallet-drainer activity, clipboard manipulation, hidden forms or credential-harvesting forms were observed, and no brand impersonation was detected. No conflicting legal identities appear either. The listing is therefore a serious reputational red flag rather than a demonstrated attack pattern. It is compounded by the domain's extreme newness and by the nature of the offer. The homepage advertises a "Download for Windows" button while stating that the official download link is "to be added when published". The same page warns visitors against unofficial applications that claim to represent the platform. Software-distribution lures are a common abuse path for crypto brands, and a very new, derivative-looking domain in this position cannot be tied to the original platform by the evidence available. The site also states that no verification is required to onboard. That is a self-reported claim, and it is worth noting on a platform that would handle Bitcoin trades. The page's assurances about escrow design and never holding funds are unverified marketing statements. They are not independent confirmation. Evidence:

• Homepage: the download call-to-action sits alongside a status line saying the official Windows installer has not yet been published.
• Homepage: the platform claims that no verification is required to onboard, and its trading statistics are self-reported.
• Domain registration: registered 2026-09-21 (~0.08 years, about one month old) through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web archive: 1 snapshot, captured 2026-09-21 (1 year tracked), so there is effectively no independent history.

Regulatory Verification Notes

The homepage gives no legal entity, registration number, company address, licence or regulator for a service that facilitates Bitcoin trading. It leaves the reader to rely on a statement that users remain responsible for applicable laws. No third-party regulatory or broker-reputation record could be matched to the site. The absence of disclosure is a verification gap and is not by itself evidence of fraud. Here it adds to an unresolved ownership picture, and the real-world operator is not independently connected to the HODLHODL brand it invokes. The valid transport encryption is a basic hygiene control and says nothing about the operator's legitimacy. Evidence:

• Homepage: no legal entity name, registration details, physical address or licensing statement is presented.
• Homepage: fee levels are referenced to an FAQ rather than stated on the page.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-20.

What to Verify Next

Any relationship between this domain and the HODLHODL platform should be confirmed through the established platform's own channels, reached independently of this site. The key question is whether a Windows application exists and where it is officially distributed. No installer should be obtained from this domain. Any entity or licensing claim should be checked against the relevant registries for the jurisdiction in question. The nature of the external listing should be re-checked against the originating threat-intelligence source before any engagement, and the official support and contact channels should be confirmed offline. Evidence:

• Homepage: the page itself admits that no official download is yet published.
• Homepage: the page names no operator or jurisdiction against which a registry check could be made.
• Domain registration: the domain is about one month old, so no track record exists to rely on.

Summary Verdict

The overall posture is elevated risk with a clearly cautionary assessment. A confirmed external listing, combined with a brand-adjacent domain that is only weeks old and an unconfirmed operator, outweighs the well-articulated product description. The technical hygiene and the coherent page content do not offset the reputation signal, and the site cannot be treated as safe for sensitive use.

Infrastructure Integrity

The site sits behind Cloudflare's CDN/WAF. All observed addresses are edge servers, and the origin host could not be observed, so hosting cannot be independently attributed. Bot-challenge protection was present, and the sandbox runs were stable and returned successful responses. These are mitigating factors only. Shared edge infrastructure is available to any customer, legitimate or not, and does not offset the external listing. A heuristic flag about a young domain with sparse subdomains is consistent with the registration age but is unconfirmed.

Closing Assessment

Interaction should be limited to passive reading. No account creation, login, credential entry, wallet connection, fund transfer or software download should occur through this domain. Anyone seeking the real platform should reach it through a source they already trust and have independently verified.