Is on2.vercel.app safe? TrustSniffer's low-trust assessment: 38/100

Overview

The site is a single-page web property published as a subdomain on a public application-hosting platform. Its homepage is titled "Minting Free – OSYC" and carries only a few sentences of text. To a visitor it presents a free token or NFT "minting" promotion tied to the label OSYC, with no visible product description, team, or documentation. Its apparent purpose is to draw visitors into a free-minting offer, which is a common entry point for crypto-asset promotions.

Scam/Impersonation Risk

This assessment is clearly cautionary because contradictory external signals are present. Several independent security engines currently flag the domain as malicious or suspicious, and the aggregate reputation picture meets the threshold for a confirmed blacklist listing. No brand impersonation, phishing page, or conflicting legal identities were observed in the site's own content. The site does not name a legal entity, so it also offers no identity to contradict. The negative picture therefore rests on third-party detections, not on a demonstrated deceptive page. A free-minting offer on a throwaway platform subdomain, with no stated operator, is the profile that wallet-draining and fake-airdrop campaigns commonly use. Separately, many abuse reports exist against the shared edge address the site resolves to. These apply to the hosting provider's shared infrastructure rather than to this site specifically, so they are discounted and are not treated as evidence against it. In three automated sandbox visits the page made no external network calls, requested no wallet connection, attempted no clipboard manipulation, and showed no cloaking. That is a mitigating observation but does not offset the external detections, because malicious behavior can be introduced later or served selectively. Evidence:

• Homepage: titled "Minting Free – OSYC", with only a very short block of text and no product, team, or terms content.
• Reputation checks: three engines rated the domain malicious and one rated it suspicious, which supports the confirmed blacklist listing.
• Provenance: the domain is about 2.1 years old, with only 8 archive snapshots spanning 2023–2026 (4 years tracked), which is thin continuity for an asset-handling service.
• Abuse reports: 93 reports exist against the shared edge IP 64.29.17.195, which belongs to the platform provider. They are discounted as shared-infrastructure noise.

Regulatory Verification Notes

The homepage identifies no operating company, jurisdiction, licensing status, or registration number. It also has no terms, privacy, or risk-disclosure pages. Ownership is opaque and no governance information is published. For a site inviting asset-related interaction, this is a significant disclosure gap. On its own it is a verification gap rather than proof of wrongdoing, but here it compounds the external detections. No regulatory or broker-database record matches this site, and the absence of such a record is not itself a negative finding. The site's real-world operator remains unverified, so any claim of legitimacy would be unsupported. Evidence:

• Homepage: contains no company name, address, licence, or legal pages.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: a TLS certificate issued by WR1 (DV, domain validation only), valid to 2027-01-29. This confirms encryption but says nothing about who operates the site.

What to Verify Next

Before any interaction, confirm independently whether OSYC is a real project. Look for an official announcement through channels reached separately from this site, such as a known project account or documentation located without following links from this page. Anyone considering a mint should check the token or collection contract on a public block explorer and confirm that the contract address published by the project matches. Because the threat detections are current, the listing status should be rechecked against several reputation sources before any reassessment. Any claim of licensing or registration should be confirmed with the relevant registry, and the official support channels should be confirmed offline. Evidence:

• Homepage: the "minting" offer names no contract, chain, or issuer to check against.
• Homepage: no regulator, registry, or entity reference exists to look up.
• Reputation: the current detections are the main reason to check again later.

Summary Verdict

The overall posture is high risk. Converging external threat detections outweigh the site's clean technical hygiene and benign sandbox behavior. The site's identity and purpose remain unverified, so it cannot be treated as a legitimate operator.

Infrastructure Integrity

The site is served from a mainstream cloud provider's network behind a content-delivery layer. All observed addresses are edge servers, and the origin server is not visible. This shows professional hosting and a valid certificate, which mitigates infrastructure-level risk. It does not demonstrate legitimacy, and it limits independent verification of where content is actually served from. Content on such platforms can be swapped quickly, and protective infrastructure cannot offset the reputation concerns.

Closing Assessment

Treat the site as suitable for read-only viewing at most. Do not log in, connect a wallet, sign transactions, supply credentials, or make any payment on it. Any minting or asset interaction should wait until independent, off-site verification of the project succeeds and the threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 93 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.