Is onchainevm.com safe? TrustSniffer's low-trust assessment: 34/100

Overview

This is the homepage of onchainevm.com, a single-page web application whose browser title is the unmodified default "React App". The domain name suggests an on-chain or EVM-themed product, but the captured page text does not clearly state what the site sells, who runs it, or how it earns revenue. The site presents itself as a front-end application of unclear purpose.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, which is a confirmed blacklist listing and not merely a soft reputational signal. The domain was registered only about seven months ago, and its archive record is very thin. A new, lightly documented domain with an active blacklist listing fits the profile of short-lived, high-risk web properties. No conflicting legal identities and no brand impersonation were observed, so the elevated risk comes from the reputation and provenance signals. A large volume of abuse reports is also attached to the address the site resolves to. That address is shared hosting infrastructure, so the reports describe the shared address and not necessarily this site. They were not discounted, and they add to the unfavourable picture. Behavioural testing was more benign. Repeated sessions produced stable responses, with no wallet-connection prompts, clipboard tampering, hidden forms, credential posts to external hosts, or content cloaking. About 39 background requests went to external destinations, but none went to unrecognised hosts. These observations are mitigating, but they do not outweigh the blacklist listing. Evidence:

• Homepage: the page carries the default template title "React App" and gives no clear statement of purpose, product, or operator.
• Threat reputation: two engines rate the domain malicious and one rates it suspicious, and an external blacklist flag is set.
• Domain registration: registered 2026-03-16, about 0.61 years (~224 days) old, through HOSTINGER operations, UAB.
• Web archive: 3 snapshots spanning 2026-03-19 to 2026-03-20 (1 year tracked), so the history is short.

Regulatory Verification Notes

The homepage gives no clear legal entity, registered business, licence, or regulatory status. No regulator or third-party broker record could be matched to the site. The operator's real-world identity is therefore unverified. The ownership and governance picture is opaque, and the site does not offer the on-page disclosures that would let a visitor resolve this. The absence of a licence is a verification gap and is not by itself evidence of wrongdoing. Here, however, it adds to the blacklist listing and the very recent registration instead of offsetting them. The site shows some basic technical hygiene: a valid, mainstream-issued TLS certificate and a stable, continuously reachable homepage. This is ordinary baseline hygiene and does not establish who operates the site. Evidence:

• Homepage: no operator name, licence number, registration detail, or legal pages could be identified.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport encryption: the TLS certificate was issued by YE2 at domain-validated (DV) level, valid to 2026-12-11. Validation confirms domain control only, not organisational identity.

What to Verify Next

Before any interaction beyond viewing the page, an independent party should establish who operates the site. It should also determine what the site actually offers, since the homepage does not say. The steps are: Evidence:

• Search the relevant company and financial-services registries for any entity claiming to operate under this name.
• Look for the project through independent, long-standing channels such as established community or code-hosting presences, and confirm that those channels link back to this domain and not the reverse.
• Confirm the official support and contact channels through an independent route.
• Re-check the domain's threat listings with each reporting engine to see whether the flags persist or have been cleared.
• Homepage: no registry reference or verifiable operator claim is available to check.
• Threat reputation: the current malicious and suspicious detections are the specific listings to re-check.
• Domain registration: the recent registration date means no long track record exists to lean on.

Summary Verdict

The available evidence supports an explicitly cautionary, elevated-risk posture. Active threat listings on a very young, thinly documented domain with unclear purpose and no verifiable operator outweigh its basic technical hygiene. The site cannot be treated as trustworthy, and its legitimacy is unproven.

Infrastructure Integrity

The site is delivered through Amazon Web Services CDN/WAF edge servers, and both observed addresses are edge nodes. The origin server was not observable. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true hosting and can mask rapid content changes. Protective infrastructure cannot offset the reputation risk.

Closing Assessment

Read-only viewing is the only use consistent with the evidence. The site should not be used for account login, credential entry, wallet interaction, or any payment or financial action unless a reputable independent party confirms the operator's identity and the threat listings are cleared.

Signals weighed against the site

• AbuseIPDB: 1698 reports on hosting IP 35.157.26.135 (A100 ROW GmbH, Data Center/Web Hosting/Transit), 39% confidence. The reports are attributed to shared infrastructure, not specifically to this website.