--- title: "Is onchainevm.com Safe? Risk Report, Score 34/100" source: TrustSniffer type: Website trust & fraud report subject: "onchainevm.com" verdict: "Low Trust" title: "Is onchainevm.com Safe? Warning Signs, Score 34/100" trust_score: 34 classification_confidence: 75 canonical_url: https://trustsniffer.com/report/onchainevm.com assessed: 2026-10-27 --- # Is onchainevm.com safe? TrustSniffer's low-trust assessment: 34/100 ## Verdict **Verdict: Low Trust, trust score 34/100.** onchainevm.com is low-trust and potentially risky. Several risk patterns were present. Do not send money or personal details until you have verified this business another way. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-27 by automated analysis. Classification confidence 75%. ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 2 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 39% confidence (AbuseIPDB, 1698 reports; shared hosting inflates reports) | Clear | | Domain age | 7 months old (Most scam domains are under a year old) | Watch | | Web archive | Archived since 2026 (3 snapshots) | Clear | | Certificate | Encrypted connection (Issued by YE2) | Noted | ## The page as captured ![Screenshot of the onchainevm.com homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/onchainevm.com/screenshots/first.png) _What onchainevm.com served when TrustSniffer captured it on 2026-10-27. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - Domain age: less than 1 year (registration continuity). - Public web-archive history exists since 2026. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Overview This is the homepage of onchainevm.com, a single-page web application whose browser title is the unmodified default "React App". The domain name suggests an on-chain or EVM-themed product, but the captured page text does not clearly state what the site sells, who runs it, or how it earns revenue. The site presents itself as a front-end application of unclear purpose. ### Scam/Impersonation Risk Contradictory signals are present and are the decisive factor in this assessment. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, which is a confirmed **blacklist** listing and not merely a soft reputational signal. The domain was registered only about seven months ago, and its archive record is very thin. A new, lightly documented domain with an active blacklist listing fits the profile of short-lived, high-risk web properties. No conflicting legal identities and no brand impersonation were observed, so the elevated risk comes from the reputation and provenance signals. A large volume of abuse reports is also attached to the address the site resolves to. That address is shared hosting infrastructure, so the reports describe the shared address and not necessarily this site. They were not discounted, and they add to the unfavourable picture. Behavioural testing was more benign. Repeated sessions produced stable responses, with no wallet-connection prompts, clipboard tampering, hidden forms, credential posts to external hosts, or content cloaking. About 39 background requests went to external destinations, but none went to unrecognised hosts. These observations are mitigating, but they do not outweigh the blacklist listing. Evidence: - Homepage: the page carries the default template title "React App" and gives no clear statement of purpose, product, or operator. - Threat reputation: two engines rate the domain malicious and one rates it suspicious, and an external blacklist flag is set. - Domain registration: registered 2026-03-16, about 0.61 years (~224 days) old, through HOSTINGER operations, UAB. - Web archive: 3 snapshots spanning 2026-03-19 to 2026-03-20 (1 year tracked), so the history is short. ### Regulatory Verification Notes The homepage gives no clear legal entity, registered business, licence, or regulatory status. No regulator or third-party broker record could be matched to the site. The operator's real-world identity is therefore unverified. The ownership and governance picture is opaque, and the site does not offer the on-page disclosures that would let a visitor resolve this. The absence of a licence is a verification gap and is not by itself evidence of wrongdoing. Here, however, it adds to the blacklist listing and the very recent registration instead of offsetting them. The site shows some basic technical hygiene: a valid, mainstream-issued TLS certificate and a stable, continuously reachable homepage. This is ordinary baseline hygiene and does not establish who operates the site. Evidence: - Homepage: no operator name, licence number, registration detail, or legal pages could be identified. - Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US). - Transport encryption: the TLS certificate was issued by YE2 at domain-validated (DV) level, valid to 2026-12-11. Validation confirms domain control only, not organisational identity. ### What to Verify Next Before any interaction beyond viewing the page, an independent party should establish who operates the site. It should also determine what the site actually offers, since the homepage does not say. The steps are: Evidence: - Search the relevant company and financial-services registries for any entity claiming to operate under this name. - Look for the project through independent, long-standing channels such as established community or code-hosting presences, and confirm that those channels link back to this domain and not the reverse. - Confirm the official support and contact channels through an independent route. - Re-check the domain's threat listings with each reporting engine to see whether the flags persist or have been cleared. - Homepage: no registry reference or verifiable operator claim is available to check. - Threat reputation: the current malicious and suspicious detections are the specific listings to re-check. - Domain registration: the recent registration date means no long track record exists to lean on. ### Summary Verdict The available evidence supports an explicitly cautionary, elevated-risk posture. Active threat listings on a very young, thinly documented domain with unclear purpose and no verifiable operator outweigh its basic technical hygiene. The site cannot be treated as trustworthy, and its legitimacy is unproven. ### Infrastructure Integrity The site is delivered through Amazon Web Services CDN/WAF edge servers, and both observed addresses are edge nodes. The origin server was not observable. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true hosting and can mask rapid content changes. Protective infrastructure cannot offset the reputation risk. ### Closing Assessment Read-only viewing is the only use consistent with the evidence. The site should not be used for account login, credential entry, wallet interaction, or any payment or financial action unless a reputable independent party confirms the operator's identity and the threat listings are cleared. _Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by external reputation, history in the web archive, behaviour in a sandbox, registration and ownership. ### 01 External reputation - Several malware engines flagged this domain. (External reputation `rule:EXT_BLACKLIST_HIGH`) ### 02 History in the web archive - The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`) ### 03 Behaviour in a sandbox - Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`) - The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`) ### 04 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ### Signals weighed against the site - AbuseIPDB: 1698 reports on hosting IP 35.157.26.135 (A100 ROW GmbH, Data Center/Web Hosting/Transit), 39% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNKNOWN | | Identity score | 50/100 | | Identity verification confidence | 30% | - AI page analysis unavailable (page captured; identity not AI-verified) _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of onchainevm.com. - The request stayed on onchainevm.com. It was not redirected to another domain. (Clear) - Registration is published under HOSTINGER operations, UAB. (Clear) - DNS for this domain is served by nsone.net, across 4 name servers. (Noted) - The registration is paid up to 2027-03-16. (Noted) - The earliest public archive of this site is from 2026-03-19. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | HOSTINGER operations, UAB | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 35.157.26.135 | | Name servers | DNS1.P04.NSONE.NET, DNS2.P04.NSONE.NET, DNS3.P04.NSONE.NET, DNS4.P04.NSONE.NET | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 2 | | Edge IP addresses | 2 | | Likely origin IP addresses | 0 | | SSL issuer | YE2 | | SSL expiry | 2026-12-11 | | Domain age | 0.61 years (continuous registration) | | Domain expiry | 2027-03-16 | | Archive first seen | 2026-03-19 | | Archive snapshots | 3 | | Reputation | VirusTotal: 2 flagged \| AbuseIPDB: 39% confidence, 1698 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about onchainevm.com at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [debank-erika83.com](https://trustsniffer.com/report/debank-erika83.com), another .com site assessed as low-trust (Low Trust, 25/100) - [tdwebusiness-banking.com](https://trustsniffer.com/report/tdwebusiness-banking.com), another .com site assessed as low-trust (Low Trust, 40/100) - [sync-trust.com](https://trustsniffer.com/report/sync-trust.com), another .com site assessed as low-trust (Low Trust, 25/100) - [unorich.com](https://trustsniffer.com/report/unorich.com), another .com site assessed as low-trust (Low Trust, 25/100) - [dcnjsdjcnsjkdncjlkdsk.com](https://trustsniffer.com/report/dcnjsdjcnsjkdncjlkdsk.com), another .com site assessed as low-trust (Low Trust, 25/100) - [effectivesolana.com](https://trustsniffer.com/report/effectivesolana.com), another .com site assessed as low-trust (Low Trust, 25/100) - [decnencjncjnfnjfjkjjdjjdjj.com](https://trustsniffer.com/report/decnencjncjnfnjfjkjjdjjdjj.com), another .com site assessed as low-trust (Low Trust, 25/100) - [directproductcenter.com](https://trustsniffer.com/report/directproductcenter.com), another .com site assessed as low-trust (Low Trust, 25/100) - [snapshots-pons-102.pages.dev](https://trustsniffer.com/report/snapshots-pons-102.pages.dev), another site assessed as low-trust (Low Trust, 40/100) - [snapshots-pendlefinance-102.pages.dev](https://trustsniffer.com/report/snapshots-pendlefinance-102.pages.dev), another site assessed as low-trust (Low Trust, 35/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [No Age Distribution Yet for Suspicious Websites](https://trustsniffer.com/blog/no-age-distribution-suspicious-websites) - [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site) - [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26) --- *Source: [TrustSniffer](https://trustsniffer.com/report/onchainevm.com) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/onchainevm.com · assessed 2026-10-27.*