Is trendle.finance a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, presented at trendle.finance, is a single-page crypto-finance style site. Its homepage carries the title "$WOD Early Player Rewards | World of Dypians", which points to a token reward or early-player campaign for a gaming project. Its apparent purpose is to attract visitors to a token-rewards promotion. The page shows no named operator and no clear link between the domain name and the campaign it advertises.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors independently classify the domain as malicious, and a further group flags it as suspicious. Together these amount to a confirmed blacklist-level reputation hit. That detection was strong enough to override every positive technical signal. The site's history also carries a known phishing association. The homepage title promotes a token-reward campaign under a different project name from the domain, which is a branding mismatch. A reward-claim page on a mismatched domain is a common pattern in token-reward lures that lead to credential or wallet compromise. This mismatch is not a formal identity contradiction, because no conflicting legal entities were found. In the behavioural sandbox, the page made no external requests, no wallet-connection attempts, no clipboard manipulation, and no hidden or external-posting forms across three successful runs. This is a mitigating observation about what happened during the test only. It does not offset the external threat detections, and a page can change its behaviour after the observation window. Ownership is opaque, which is an administrative limitation and not an identity contradiction. Evidence:

• Homepage: titled as an early player rewards campaign for a different project name than the domain.
• Domain registered 2026-08-03 (~0.23 years, ~84 days old), so no long operating history supports the site.
• Reputation checks: 10 malicious and 5 suspicious detections out of roughly 93 engines, including three tier-one security vendors.
• Behavioural sandbox: zero external network activity and no wallet-interaction or form-based exfiltration indicators in 3 of 3 runs.

Regulatory Verification Notes

The captured homepage presents no legal entity, licence, registration number, or terms that identify an accountable operator. The disclosure position is unclear, and the registrant is not identifiable. No third-party broker or regulator record matched this domain, and that absence is not a clearance. The transport layer is in order but carries little weight as assurance. The site uses a valid, domain-validated certificate from a mainstream public issuer. Domain-validated certificates prove control of the domain, not the identity of the operator. They are routinely obtained by malicious sites. Evidence:

• Homepage: no company name, licence, or registration details are shown.
• TLS certificate issued by WE1 (DV), valid to 2026-12-30.
• Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on 2026-08-03, with expiry 2027-08-03.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any engagement, the claimed campaign should be traced to its supposed originator through that project's own established channels. These are channels reached independently of this domain, not links found on it. The reference point should be the project's official site and verified social accounts. That check should establish whether the rewards campaign exists and whether this domain is an authorised property. If the domain is not authorised, it should be treated as a lookalike. Any official support or contact channel should be confirmed through that same independent route. Anyone who has already visited the page and interacted with it should review their exposure. That means checking for approved wallet permissions, re-using a password entered there, or any signed transaction. Evidence:

• Homepage: the rewards campaign is attributed to a project whose name does not match the domain.
• Threat-intelligence status: current detections should be re-checked at the time of any decision, since listings can be remediated or can worsen.
• Domain registration is under three months old, so no track record can be consulted.

Summary Verdict

The site's overall posture is high-risk. External threat intelligence marks it as malicious, and this outweighs every neutral or favourable technical attribute. Its identity and operator remain unverified, and its newly registered domain adds no offsetting track record. It should be regarded as a probable phishing or token-reward lure, not as an established, legitimate property.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address on the Cloudflare network. This is a legitimate infrastructure provider, and the setup shows no resolution anomalies. The origin server is not visible. Edge-only visibility prevents independent confirmation of the real hosting and can mask rapid content changes behind a stable front. This is a mitigating factor only. It does not bear on the operator's legitimacy and does not offset the reputation findings.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, signing transactions, or any financial interaction. Passive viewing is the only reasonable use, and nothing should be downloaded from it. Anyone who has already interacted with it should treat that as a possible compromise and act accordingly.