---
title: "Is rewards-treehousefi.xyz a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "rewards-treehousefi.xyz"
verdict: "Critical Risk"
title: "Is rewards-treehousefi.xyz a Scam? Risk Report, Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/rewards-treehousefi.xyz
assessed: 2026-10-27
---

# Is rewards-treehousefi.xyz a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** rewards-treehousefi.xyz shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-27 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 3 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 3 months old (Most scam domains are under a year old) | Risk |
| Certificate | Encrypted connection (Issued by WE1) | Noted |
| Hosted by | CLOUDFLARENET (Server in US) | Noted |

## The page as captured


![Screenshot of the rewards-treehousefi.xyz homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/rewards-treehousefi.xyz/screenshots/first.png)

_What rewards-treehousefi.xyz served when TrustSniffer captured it on 2026-10-27. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself, through its page title, as "Treehouse | The Decentralized Fixed Income Layer". It operates from a "rewards"-prefixed domain on an uncommon, low-cost top-level domain, which suggests a rewards or claim-style page tied to a decentralized-finance fixed-income brand. Its apparent purpose is to draw visitors into a crypto rewards or yield interaction. No independent evidence connects it to the genuine protocol it names.


### Scam/Impersonation Risk

Confirmed adverse contradictions are present. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, including a tier-one security vendor, and an external blacklist listing is confirmed. This is decisive. The domain is also very recently registered, and its name pairs a protocol brand with a "rewards" prefix, a pattern typical of reward-claim and wallet-linking lures. No conflicting legal entities were found, and no phishing form or wallet-drainer behavior was observed in the sandbox. The listings alone, together with the brand-adjacent naming on a newly created domain, justify a clearly cautionary stance. In the sandbox runs, nearly all outbound traffic went to third-party destinations, including repeated external data submissions. That is atypical for a simple informational page and is consistent with a front-end that relays user activity elsewhere. The owner is concealed and the domain is new, so the site cannot be treated as a legitimate expression of the brand it displays. Evidence:

- Homepage: the page title reads "Treehouse | The Decentralized Fixed Income Layer" on a domain that is not an independently verified property of that brand.
- Threat-intelligence reputation: three engines rate the domain malicious and two suspicious, and the external blacklist flag is confirmed.
- Domain provenance: registered 2026-07-18 (~0.28 years old), about three months before this assessment.
- Sandbox behavior (3 successful runs): 27 external XHR/fetch calls and 9 external POST requests, with up to 97.6% of observed activity directed off-site. Nine console errors were logged. No wallet-provider, clipboard-hijack or hidden-form activity was detected.

### Regulatory Verification Notes

No licensing, registration, legal-entity or terms information could be established for this site, and its real-world operator remains unidentified. The page captured was a brand-style landing page, and its identity was not independently verified. Registrant details are incomplete, which is **ownership opacity** and not an identity contradiction. Because the site presents itself as a financial-services protocol, it would normally be expected to disclose a responsible entity. That expectation is unmet here. No third-party broker or regulatory-database entry corresponds to the domain. The protocol directory used for DeFi recognition also does not list it. Evidence:

- Registration: Dynadot Inc registrar; created 2026-07-18, expires 2027-07-18.
- Transport security: DV certificate issued by WE1, valid to 2026-12-14 (48 days remaining). This confirms encryption only and does not establish operator identity.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- DeFi recognition: not listed in the DeFiLlama protocol directory, so no TVL is attributable.

### What to Verify Next

Before any engagement, anyone considering this site should confirm the official domain of the Treehouse protocol through its announcements on independently known channels, such as its verified social profiles and documentation. They should then compare that domain character by character with this one. They should check whether any genuine rewards or airdrop program exists and how it is officially claimed. Any contact channel must be confirmed offline or through an independent route. Wallet-connection or signing prompts from this domain should be treated as untrusted until the operator is established. Evidence:

- Homepage: brand and tagline are displayed without a verifiable link to a known operating entity.
- Domain registration: the three-month-old registration and incomplete registrant data prevent attribution from public records.
- Reputation listings: current external flags indicate the domain should not be used as a trusted source of any claim.

### Summary Verdict

The site carries an elevated, high-risk posture. Active threat-intelligence listings outweigh the technical hygiene present, such as a valid certificate and stable page delivery. Its brand-adjacent presentation, very recent creation and concealed ownership converge on a profile consistent with abuse-ready infrastructure, and it cannot be treated as legitimate.


### Infrastructure Integrity

The site is fronted by Cloudflare, a reputable CDN and WAF. Every observed address is an edge node, and no origin host could be observed, so hosting cannot be verified independently. Edge protection also blocked automated page capture through a bot challenge. This is a mitigating factor only. It shows the site is competently fronted but does not offset the reputation findings, and it can mask rapid content changes behind a stable address.


### Closing Assessment

The site should not be used for login, credential entry, wallet connection, signing or any financial interaction. At most, it should be viewed in a read-only, isolated context, with nothing downloaded from it. Anyone who has already interacted with it should revoke wallet approvals, change any related credentials and report the domain to the impersonated brand's official support.


_Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, hosting and network, registration and ownership.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)
- Many of the responses the page received looked generated rather than served normally. (Behaviour in a sandbox `rule:BEHAV_SYNTHETIC_RESPONSES_HIGH`)

### 03 Hosting and network
- The domain was registered between three and six months ago. (Hosting and network `rule:DNS_YOUNG_6M`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of rewards-treehousefi.xyz.

- The request stayed on rewards-treehousefi.xyz. It was not redirected to another domain. (Clear)
- Registration is published under Dynadot Inc. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-07-18. (Noted)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Dynadot Inc |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::ac43:a14d |
| Name servers | ASPEN.NS.CLOUDFLARE.COM, LOCHLAN.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-14 |
| Domain age | 0.28 years (continuous registration) |
| Domain expiry | 2027-07-18 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 3 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about rewards-treehousefi.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [livesolstreamings.xyz](https://trustsniffer.com/report/livesolstreamings.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [support-pumpbtc.xyz](https://trustsniffer.com/report/support-pumpbtc.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [lighterbsc.xyz](https://trustsniffer.com/report/lighterbsc.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [pumpfunsolstreamer.xyz](https://trustsniffer.com/report/pumpfunsolstreamer.xyz), another .xyz site assessed as critical-risk (Critical Risk, 1/100)
- [livesolstream.xyz](https://trustsniffer.com/report/livesolstream.xyz), another .xyz site assessed as critical-risk (Critical Risk, 1/100)
- [stonk-fun.xyz](https://trustsniffer.com/report/stonk-fun.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [pumpfunstreams.xyz](https://trustsniffer.com/report/pumpfunstreams.xyz), another .xyz site assessed as critical-risk (Critical Risk, 1/100)
- [verify-doginaldogs.xyz](https://trustsniffer.com/report/verify-doginaldogs.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [okxclaim-robinhood.netlify.app](https://trustsniffer.com/report/okxclaim-robinhood.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [crypto-7lc.netlify.app](https://trustsniffer.com/report/crypto-7lc.netlify.app), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites)
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/rewards-treehousefi.xyz) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/rewards-treehousefi.xyz · assessed 2026-10-27.*