---
title: "Is ofice.online a Scam? Trust Score 0/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "ofice.online"
verdict: "Critical Risk"
title: "Is ofice.online a Scam? Trust Score 0/100"
trust_score: 0
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/ofice.online
assessed: 2026-08-21
---

# Is ofice.online a scam? TrustSniffer's high-risk assessment: 0/100

## Verdict


**Verdict: Critical Risk, trust score 0/100.** ofice.online shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-08-21 by automated analysis. Classification confidence 55%.

| Field | Value |
| --- | --- |
| What this site appears to be | Minimal login page for 'WebWizard ERP ТехноМашСтрой' with no explanatory content. Requires credentials; origin and trustworthiness not verifiable from page. |

## Evidence status and limitations


Evidence completeness: UNKNOWN

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 12 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0 reports (AbuseIPDB; shared hosting inflates this count) | Noted |
| Domain age | 4.1 years old (Registered history) | Clear |
| Web archive | Archived since 2023 (Public history exists) | Clear |
| Certificate | Encrypted connection (Issued by YR1) | Noted |

## The page as captured


![Screenshot of the ofice.online homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/ofice.online/screenshots/first.png)

_What ofice.online served when TrustSniffer captured it on 2026-08-21. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 3 to 10 years (registration continuity).
- Public web-archive history exists since 2023.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a minimal authentication portal labeled “WebWizard ERP ТехноМашСтрой,” presenting only a login interface and no public explanation of its services, operating entity, pricing, or legal status. Its apparent purpose is to provide access to an ERP or enterprise system, but the available page does not establish who operates it or why credentials should be submitted.


### Scam/Impersonation Risk

The site presents a **critical sensitive-interaction risk**. Independent external screening recorded multiple malicious detections and a blacklist hit from more than one source; under the available evidence, this is a confirmed reputational security contradiction rather than a minor warning. The homepage also requests credentials while providing no contextual content, creating a high-stakes evidence gap. Its title shows strong similarity to “office.com,” although the available identity evidence does not establish a confirmed impersonation relationship. No conflicting legal-entity names were observed.


Evidence:
- Homepage: one login form requests credentials, while the page contains only the text “WebWizard ERP ТехноМашСтрой” and “Вход.”
- Homepage: no service description, corporate identity, legal information, or explanatory navigation is presented.
- External screening: multiple malicious detections were recorded, including a blacklist hit from two external sources.
- Domain registration: registered 2022-07-03; age 4.13 years; registrar Hosting Ukraine LLC.
- Historical records: 86 archive snapshots spanning 2023–2025, with 3 years tracked.

### Regulatory Verification Notes

The public-facing material does not provide a legal entity, licensing statement, registration number, or accountable operator for the ERP portal. This is a material transparency gap for an authentication service, although the absence of a licensing disclosure alone is not proof of fraud. The real-world operator remains unverified, and the available broker-reputation context contains no match. The domain’s registration continuity and transport security are concrete technical facts, but neither establishes the legitimacy of the operator or authorizes credential use.


Evidence:
- Hosting: served from AS200000, Ukraine-AS - Hosting Ukraine LTD, UA.
- TLS: certificate issued by YR1 at DV validation level, valid to 2026-11-18T23:15:44+00:00.
- Legal and identity pages: no publicly accessible company, licensing, or registration disclosure was identified in the available site content.

### What to Verify Next

Any organization expecting access through this portal should confirm the domain and login workflow through an independently known employer, ERP vendor, or administrator channel rather than through contact details supplied by the site. Licensing or corporate-registration claims, if later provided, should be checked directly with the relevant official registry. Credentials should not be entered until the portal’s authenticity and operational ownership have been confirmed; credentials already submitted should be treated as potentially exposed and handled under the relevant account-compromise process.


Evidence:
- Homepage: the portal exposes a sensitive login form without public context.
- Site navigation: no internal or external links were available to validate the service or operator.
- Identity verification: the available evidence does not independently connect the portal to a verified real-world entity.

### Summary Verdict

The overall posture is **critical**, with the site unsuitable for sensitive interaction on the present evidence. Its apparent business purpose and operator identity are not established, while the convergence of the page-level evidence and external security findings prevents it from being treated as a trustworthy authentication endpoint.


### Infrastructure Integrity

The site is hosted directly through Ukraine-AS - Hosting Ukraine LTD, with no CDN or WAF identified and two likely origin addresses. This infrastructure provides no meaningful protective mitigation for the current risk assessment.


### Closing Assessment

Access should remain suspended unless the portal is independently authenticated through a known organizational or vendor channel; credentials and financial activity should not be submitted in the interim.


_Written analysis generated 2026-08-21 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by registration and ownership, page content, analysis engine, external reputation.

### 01 Governance Risk
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)
- The page presents a sign-in form, and the operator behind it could not be independently verified. (Page content `rule:PAGE_TYPE_LOGIN_UNVERIFIED`)

### 02 Sensitive Interaction Risk
- The analysis matched a pattern TrustSniffer treats as a direct threat to a visitor. (Analysis engine `signal:direct_threat`)
- The page asks visitors for sensitive information. (Page content `rule:PAGE_FORM_SENSITIVE`)
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)
- The page presents itself as a brand TrustSniffer confirmed it does not belong to. (Page content `rule:PAGE_BRAND_IMPERSONATION_CONFIRMED`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNVERIFIED |
| Identity score | 30/100 |
| Identity verification confidence | 50% |

- No on-site identity signals detected

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of ofice.online.

- The request stayed on ofice.online. It was not redirected to another domain. (Clear)
- Registration is published under Hosting Ukraine LLC. (Clear)
- DNS for this domain is served by inhostedns.com, across 3 name servers. (Noted)
- The registration is paid up to 2027-07-03. (Noted)
- The earliest public archive of this site is from 2023-03-05. (Clear)
- It is hosted on Ukraine-AS, from a server in UA. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Hosting Ukraine LLC |
| Hosting | Ukraine-AS - Hosting Ukraine LTD, UA |
| Country | UA |
| Server IP | 2a06:6440:0:2d3c::1 |
| Name servers | ns115.inhostedns.com, ns215.inhostedns.net, ns315.inhostedns.org |
| SSL issuer | YR1 |
| SSL expiry | 2026-11-18 |
| Domain age | 4.13 years (continuous registration) |
| Domain expiry | 2027-07-03 |
| Archive first seen | 2023-03-05 |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 12 flagged \| AbuseIPDB: 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


A trust score summarises the evidence TrustSniffer could collect about ofice.online at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [jointaxel.online risk report](https://trustsniffer.com/report/jointaxel.online) (Critical Risk, 0/100)
- [uno-play.online risk report](https://trustsniffer.com/report/uno-play.online) (Critical Risk, 0/100)
- [1pokerhoki.online risk report](https://trustsniffer.com/report/1pokerhoki.online) (Critical Risk, 0/100)
- [mallumv.online risk report](https://trustsniffer.com/report/mallumv.online) (Critical Risk, 0/100)
- [robbyridltrucking.com risk report](https://trustsniffer.com/report/robbyridltrucking.com) (Critical Risk, 0/100)
- [hurmpf.fr risk report](https://trustsniffer.com/report/hurmpf.fr) (Critical Risk, 6/100)
- [backup-base.com risk report](https://trustsniffer.com/report/backup-base.com) (Critical Risk, 0/100)
- [printshop.co.kr risk report](https://trustsniffer.com/report/printshop.co.kr) (Critical Risk, 0/100)
- [p-edukul.org risk report](https://trustsniffer.com/report/p-edukul.org) (Critical Risk, 0/100)
- [royavi.net risk report](https://trustsniffer.com/report/royavi.net) (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory)
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains)
- [Check another website](https://trustsniffer.com/web-intelligence)
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk)
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats)

## Guides
- [Script Droppers: How This Download Scam Works](https://trustsniffer.com/blog/script-droppers-how-this-download-scam-works)
- [Stablecoin Freezes Sept 23, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-23)
- [Stablecoin Freezes, Sep 22, 2026: 60 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-09-22)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/ofice.online) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/ofice.online · assessed 2026-08-21.*