Is onchainboard.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

onchainboard.pro is a recently registered website on the .pro top-level domain. Its name suggests an on-chain or crypto-oriented dashboard or portal. The analysis could not retrieve readable homepage content, so no products, pricing, yield claims or business model could be confirmed. The site presents no verifiable offering to a visitor, and its apparent purpose rests on the domain name alone.

Scam/Impersonation Risk

This is a clearly cautionary case driven by third-party threat intelligence, not by anything the site says about itself. Several independent security engines currently rate the domain as malicious or suspicious, including a tier-one security vendor, and the domain is listed on external blacklists. These listings are the decisive finding. Their combined weight and the very young age of the domain point to a freshly stood-up property already drawing hostile reputation. No brand impersonation, conflicting legal identities or confirmed phishing page were observed, so the concern comes from the blacklist and detection record rather than from a proven impersonation. Scripted browsing of the site produced no external data transmissions, no wallet-connection or clipboard manipulation, no hidden forms and no cloaking. That is mildly reassuring about current behavior, but it does not offset blacklist-level detections. A site this new can change its content quickly, and a clean sandbox run on one day does not rule out later weaponization. The site should be treated as high-risk for any sensitive interaction. Evidence:

• Homepage and domain-level reputation: multiple security engines flag the domain as malicious (4) or suspicious (3), including one tier-one vendor, and external blacklist status is confirmed.
• Domain registration: created 2026-09-02, roughly 0.15 years (about 53 days) old, which places the site in a very-new-domain risk window.
• Behavioral testing of the homepage: three successful runs with zero external requests, zero console errors and no wallet-drainer, clipboard-hijack or hidden-form activity.

Regulatory Verification Notes

No legal, licensing or corporate-registration information could be assessed for this site. No readable terms, about or compliance page was available, so no operating entity, jurisdiction or regulator reference can be connected to the domain. The registration record also shows incomplete owner details, which is an ownership-opacity limitation and not an identity contradiction. No third-party broker or regulatory-reputation record matched the domain, so there is neither supportive nor adverse regulatory context. Licensing cannot be treated as established, and any claim of authorization would need independent confirmation. The domain was registered through NiceNIC International Group, and the site holds a valid but entry-level, domain-validated TLS certificate. Neither fact says anything about the operator's legitimacy. Evidence:

• Registration record: registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED; expiry 2027-09-02, a one-year term.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated), valid to 2026-12-01 (37 days remaining at analysis).

What to Verify Next

Before any engagement, the operator's real-world identity should be established independently. This means locating a named legal entity and a registration number through an official company registry, and confirming through the relevant financial regulator's own public register whether any license is claimed. Official contact channels should be confirmed through a trusted offline or independent route, not through links or addresses found on the site. The domain's reputation should be re-checked later, since newly listed domains are sometimes cleaned up or reclassified. Any claim of affiliation with a known protocol or brand should be checked against that organization's own publicly announced domains. Evidence:

• Domain registration of roughly 53 days leaves no established operating history to rely on.
• No operator name, registration number or license reference was available on the site to cross-check.
• The existing blacklist and detection record should be re-reviewed before any reassessment.

Summary Verdict

The overall posture is high-risk. Authoritative external detections and blacklist status are decisive, and the site's newness and lack of corroborated identity leave nothing to counterbalance them. Technical hygiene and quiet behavior in testing are acknowledged but do not change the conclusion.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address belongs to edge servers. The origin server was not observable. This is a mitigating factor only: it shows mainstream, accountable hosting, with a valid TLS certificate from a recognized issuer. It also prevents independent verification of where the content actually resides, and edge-only visibility can mask rapid content swaps on a newly created site. Protective infrastructure cannot offset the reputation damage from the external detections.

Closing Assessment

Interaction should be limited to passive, read-only viewing at most. Account login, credential entry, wallet connection and any financial transaction should be avoided until the external detections are cleared and the operator is independently identified.