defirisk.co
rubric v1.7.0

Protocol-impersonator domain registered (typosquat)

Save (formerly Solend)'s assessment for RD-F-161 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Protocol-impersonator domain registered (typosquat). Applicable. Scope note: save.finance is the LEGITIMATE rebrand domain (July 2024, per Binance Square and Decrypt) — NOT scored as impersonation. Signal is for malicious impersonators. Current posture: no specific typosquat domain targeting save.finance or solend.fi has been confirmed in available public domain-monitoring data as of 2026-05-17. Risk factors: (1) 'Save' is a highly generic English word making automated typosquat detection difficult (U22); (2) the rebrand from solend.fi to save.finance creates a dual-surface risk — users with solend.fi bookmarks could be phished if that domain were acquired; (3) no domain-monitoring feed result confirms specific malicious lookalike domains. Scored yellow [?] (inference): elevated impersonation surface from generic-word rebrand; no confirmed active typosquat.

Sources #

  • URL
    Binance Square — Solend rebrands to Save July 2024Save rebrand to save.finance July 2024 confirmed — solend.fi is prior official domainretrieved 2026-05-17
  • Internal
    Save protocol profile — U22 name collision warning.research/protocols/save/00-profile.md §11 U22 — 'Save is a highly generic word'retrieved 2026-05-17
  • URL
    Save Finance — official frontendSave protocol official domain save.finance — no malicious lookalike confirmed as of 2026-05-17retrieved 2026-05-17

Methodology #

Determine whether a typosquat of the official protocol domain has been registered in the last 90 days.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol save factor RD-F-161 score yellow collected_at 2026-05-17 15:20:15