Is usenosh.asia a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

Doppler Finance is a DeFi yield-protocol website that presents vaults where visitors deposit XRP or RLUSD to earn protocol yield. It also offers an institutional "yield-as-a-service" vault and a community governance panel. The apparent business model is custody-style yield generation: users commit crypto assets through a connected wallet and receive a share of protocol yield. A points-based reward scheme and a planned lending product extend the offering.

Scam/Impersonation Risk

The assessment is high risk, and the contradictory signals are confirmed rather than speculative. The domain is blacklisted by independent reputation sources. Several threat-intelligence engines flag it as malicious or suspicious, including one major security vendor, and a separate external blacklist signal corroborates this. No phishing form, credential harvester, or clipboard or wallet-draining behaviour was observed in sandbox runs. No brand impersonation was detected, and no conflicting legal identities appear. The risk comes from the combination of external detections and the product itself. The homepage asks visitors to connect an EVM or XRP wallet to cast a governance vote on how yield is split (60% to depositors, 60% to liquidity providers, or an equal split), and each vote earns "+200 XP". Points rewards for wallet connection are a common engagement and lure mechanic. The XRP and RLUSD vaults ask for deposits before any service is delivered. The page offers no audit report, no explanation of where the yield originates, and no sustainability rationale. The brand shown to visitors, Doppler Finance, also does not match the domain name. This is not confirmed impersonation, but the site gives no explanation for the mismatch. The homepage disclaimer says yield figures are "illustrative", rewards are "not guaranteed", and the reward structures are "not registered under any securities laws". These statements limit the operator's liability but do not substantiate the product. Evidence:

• Homepage governance panel: wallet connection is required to submit a vote, with a 200-point reward attached to every option.
• Homepage product sections: XRP Vault, RLUSD Vault, and Institutional Vault are presented without audit or yield-source documentation.
• Domain registered 2026-10-05, about 14 days before assessment (~0.04 years old).
• Web archive holds only 2 snapshots, spanning 2026-10-06 to 2026-10-07 (1 year tracked).

Regulatory Verification Notes

The site's visible content identifies no operating legal entity, jurisdiction, licence, or registration number. Its only legal positioning is the disclaimer that rewards are not regulated financial products. Terms of Service, Privacy Policy and Disclaimer are referenced as documentation pages but were not part of the evidence set. Marketing an "institutional" yield service with no named entity or regulatory standing is a significant disclosure gap for a product that takes deposits. This gap is a verification matter and is not treated as proof of wrongdoing on its own. No third-party broker or regulator listing was matched for the site, and it is not recognised in the DeFi protocol directory. The transport-encryption certificate confirms only that the connection is encrypted. It says nothing about the operator. Evidence:

• Homepage footer disclaimer: rewards "not guaranteed", yields "illustrative", no entity or licence named.
• Registrar of record is Spaceship, Inc., with registration running to 2027-10-05.
• Served from AS13335 (Cloudflare); TLS certificate issued by YE1 (DV), valid to 2027-01-03.
• DeFi protocol directory lookup returned no listing for the project; no TVL could be established.

What to Verify Next

Before any engagement, the connection between this domain and the Doppler Finance project should be tested through channels reached independently of the site. That means the project's officially announced domain, social accounts and documentation, located through a trusted external source and not through links on this page. The operator's legal entity, jurisdiction and any applicable virtual-asset or securities registration should be confirmed with the relevant regulator's public registry. Smart-contract addresses, independent security audit reports, and the real source of the advertised yield should be located and checked on a blockchain explorer before any assets are committed. The official support and contact channels should also be confirmed through an independent route. Evidence:

• Homepage footer: documentation, community and social links exist but could not be validated as belonging to the genuine project.
• Homepage: no audit or yield-source explanation is visible to check against.
• Lending is labelled "coming soon", so only the vault products can currently be assessed.

Summary Verdict

The overall posture is one of elevated risk. Independent threat-intelligence detections converge with a brand-new domain and an unaudited, deposit-first yield product from an unidentified operator. The site's technical hygiene and clean sandbox behaviour do not offset that convergence. Available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host could not be observed. The valid certificate and mainstream edge provider are mitigating factors only. Edge-only visibility also prevents independent hosting verification and can mask rapid content changes, so the infrastructure cannot offset the reputation findings.

Closing Assessment

Browsing the site read-only is the only use consistent with the evidence. Wallet connections, governance votes, deposits, and any login or credential entry should be avoided unless the project's identity and security are independently confirmed.