Is tydro-votings-com.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Tydro presents itself as a non-custodial DeFi lending and borrowing protocol on the Ink Layer-2, described as powered by Aave. The page is a single landing page showing headline protocol metrics (billions in deposits and borrows, and a very large 30-day volume), a short table of lending markets with borrow rates, and a promotion telling governance voters they will receive an early TYDRO token allocation from a treasury pool. It is served from a free project-hosting subdomain rather than a standalone domain. Its apparent purpose is to draw visitors into voting, supplying assets and borrowing against collateral through smart contracts.

Scam/Impersonation Risk

The assessment is clearly cautionary because hard contradictory signals are present. Multiple independent threat-intelligence sources flag the address as malicious or suspicious, and it is blacklisted by external reputation sources. This is the decisive risk factor. The address is also structurally deceptive. It is a subdomain on a shared project-hosting platform whose label spells out "tydro-votings-com", imitating a separate ".com" property and pairing the brand with a "votings" theme. That matches the page's "Vote Now" call to action for the TYDRO rewards allocation, a pattern commonly used to lure holders into connecting wallets or approving transactions. The page itself makes unsupported claims. It says the protocol "has been trusted by leading institutions and companies" but names no partner. It describes Aave as "the world's largest and most trusted" DeFi network, which borrows credibility from a third party. It also advertises large deposit, borrow and volume figures that cannot be checked from the page. Its market table shows low borrow rates of roughly 0.35% to 2.59% on USDT, kBTC and ETH, which look like a copy of a mature lending front end. The site does not show a login form, hidden forms, wallet-drainer behaviour or clipboard manipulation in the sandbox runs. The behavioural evidence therefore does not confirm a credential-harvesting mechanism, but it does not offset the reputation findings. No conflicting legal identities were found, and brand impersonation is suspected rather than confirmed. Evidence:

• Homepage: the address is a subdomain on a shared project-hosting platform with the brand, "votings" and ".com" embedded in the label, and the page promotes a "Vote Now" TYDRO rewards allocation.
• Homepage: it claims trust by "leading institutions" and shows large protocol metrics without naming any partner, audit or source.
• Reputation sources: several threat-intelligence engines classify the address as malicious or suspicious, and an external blacklist hit is recorded.
• DeFi directory check: the claimed protocol could not be matched to a recognised DeFi directory listing, so no independent TVL figure supports the advertised metrics.

Regulatory Verification Notes

The homepage names no legal entity, operator, jurisdiction, audit firm or licence. The only identity artefact is a "©2025 Tydro®" copyright line, with links to Terms of Use and Privacy Policy under a "Company" heading. The governance and ownership picture is therefore opaque, and the site's real-world operator cannot be independently tied to the Tydro or Aave brands it invokes. The page states it is non-custodial and built on an Aave fork, but it does not describe any regulatory status for a service that takes crypto deposits and offers borrowing. No third-party broker or regulatory-database entry was matched. The absence of disclosure is a verification gap on its own, and it carries weight here only because it coincides with the blacklist findings above. Evidence:

• Homepage footer: only a copyright line with the registered-mark symbol, and no company name, address or registration number.
• Homepage: no audit report, regulator reference or licence is cited, although it handles deposits and borrowing.
• Broker-reputation dataset: no match was found for the brand.
• Hosting and transport: served from AS13335 (Cloudflare, Inc., US); TLS certificate is DV-level, issued by WE1, valid to 2026-12-04, which shows encryption but not operator identity.

What to Verify Next

Before any interaction, the genuine Tydro protocol address should be confirmed through a source independent of this site, such as the official Ink Foundation or Aave documentation or a verified social account that was not reached through this page. The governance voting and TYDRO rewards announcement should be confirmed against that official source, and the voting flow on this address should not be treated as authentic until then. Any claimed audit, institutional partner or operating entity should be checked directly with the named party. The official support and contact channels should also be confirmed. The advertised protocol metrics should be compared with independent on-chain data. Evidence:

• Homepage: the Docs, FAQ, Terms and Community links need independent confirmation that they lead to the official project and not to copies.
• Homepage: the "Partners" statement lists no names, so it cannot be tested without direct outreach.
• Homepage: the TYDRO rewards claim ties value to a vote action and must be confirmed against official channels.

Summary Verdict

The available evidence supports a high-risk posture. External threat detections and the deceptive address structure outweigh the page's polished, coherent presentation, and the operator remains unidentified. The site reads as an unverified, probably imitative DeFi front end and not as a trustworthy venue for sensitive activity.

Infrastructure Integrity

The site is served entirely through Cloudflare's network (AS13335), and all observed addresses are edge servers, so the origin host is not visible. This edge-only visibility offers some mitigation against direct infrastructure abuse. However, it also prevents independent hosting verification and can mask rapid content changes. Protective infrastructure and a valid certificate from a known issuer do not offset the reputation findings.

Closing Assessment

At most, the page should be viewed read-only. No wallet should be connected and no vote, deposit, borrow or token approval should be made. No credentials or funds should be submitted through this address. The official protocol should be reached only through an independently verified route.