Is lending-pool.com a scam? TrustSniffer's high-risk assessment: 8/100

Overview

This website is a minimal login-style landing page on a domain whose name evokes a decentralized lending pool. The captured page is titled "Shopy" and carries almost no visible text beyond a sign-in interface. It presents no product description, company narrative, or service terms, and its apparent function is to collect account credentials for an unspecified lending or shopping service.

Scam/Impersonation Risk

Contradictory signals are present and carry decisive weight. Multiple independent threat-intelligence sources flag the domain as malicious or suspicious, and the site is blacklisted on external reputation lists. No brand impersonation, conflicting legal identities, or confirmed phishing kit was identified. The risk therefore rests on the reputation findings, reinforced by contextual signals on the site itself. The domain name points to a decentralized-finance lending product, yet the login page is titled "Shopy", which suggests a retail storefront. Nothing on the page reconciles this branding mismatch. The capture contains three password-entry forms on a page with almost no explanatory content, a pattern consistent with credential-harvesting layouts. The sandbox found no wallet-drainer behavior, clipboard manipulation, hidden forms, cloaking, or third-party data transmission. These are mitigating observations, but they do not offset the external listings. The domain was also registered only weeks before this assessment, which shortens the time any reputation could have been built. Evidence:

• Homepage and login page: the page title "Shopy" conflicts with the lending-pool naming of the domain.
• Login page: three password-entry forms were captured on a page with only a few dozen characters of visible text.
• Domain registration: registered 2026-08-10 (~0.21 years old, 76 days) through NameSilo, LLC, with a registration term to 2027-08-10.
• Behavioral sandbox: three successful runs recorded no external requests, no wallet-drainer activity, and no cloaking.

Regulatory Verification Notes

The captured page contains no legal, licensing, or corporate information. It names no operating company, registration number, regulator, or jurisdiction. It also has no terms of service or privacy policy. For a site that apparently solicits credentials in a financial-services context, this is a significant content gap. It is a verification gap, not proof of fraud on its own, but here it adds to confirmed reputational contradictions. No third-party broker or regulatory-registry record could be matched to the domain, so there is no external basis for treating it as a supervised entity. The site's operator identity cannot be independently connected to any real-world brand or person. Evidence:

• Homepage and login page: no company name, license, registry reference, or legal pages appear in the captured content.
• Transport encryption: a domain-validated TLS certificate issued by WE1, valid to 2027-01-06. This confirms an encrypted connection only, not operator identity.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any prospective interaction should begin by establishing who operates this service and whether it is authorized to offer financial products. The business should be identified through an independent source, such as an official regulator or company registry, rather than through anything on the site. If a lending or shopping service is claimed, its legitimate domain should be confirmed through the provider's verified channels or an offline route, not through links that lead here. Official support and contact channels should be confirmed the same way. Anyone who has already submitted credentials should change them wherever they were reused and review the affected accounts for unauthorized activity. Evidence:

• Login page: the "Shopy" title and the lending-pool domain name give no consistent service identity to look up.
• Reputation findings: external listings currently flag the domain, so any official-source check should precede further use.
• Homepage: no regulator or registry reference is offered that could be confirmed.

Summary Verdict

The assessment is clearly cautionary and the overall trust posture is critical. Confirmed external blacklisting, a very recently registered domain, and a credential-collection interface with no explanatory or identifying content converge on elevated risk. The sandbox's clean behavior and the valid encryption certificate do not offset this reputational evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge node, so the origin server was not visible. This is a mitigating factor only, because it shows the site uses mainstream, abuse-managed infrastructure. It also prevents independent verification of the true hosting location and can mask rapid content changes behind a stable edge address. The edge addresses carry no abuse reports. That does not offset the external threat detections or the site's very young registration history, and an unconfirmed heuristic flags the domain's sparse subdomain footprint as typical of newly created sites.

Closing Assessment

Only passive, read-only observation of this site is appropriate. No credentials should be entered, no wallet connected, and no payment or deposit made. Anyone who encountered the site through a link, message, or advertisement should report that source and avoid returning to it.