Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
ondo-finances.vercel.app is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 86 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page presentation titled "Ondo Stocks — Tokenized US Stocks & ETFs for Global Investors." It is served from a subdomain on a shared application-hosting platform rather than from a dedicated domain. To a visitor it presents an investment-style offering of tokenized U.S. equities and exchange-traded funds aimed at an international audience. Its apparent purpose is to attract investors to a digital-asset product that is a financial service.
Scam/Impersonation Risk
This is the most significant dimension of the assessment. The site is the subject of a confirmed external blacklist hit: at least one threat-intelligence engine rates the address as malicious and another as suspicious. These are the only contradictory signals present. No conflicting legal identities were found, and no impersonation or phishing flag was raised from page content. The offering is a branded tokenized-securities product published from a free, shared-platform subdomain. That is a presentation pattern commonly used by short-lived lookalike pages, and nothing independently ties the site to any similarly named issuer. A separate set of abuse complaints exists against the hosting address. Those complaints relate to shared platform infrastructure and have been discounted, so they are not attributed to this site. The browser-behaviour testing was clean: no outbound data submissions, no wallet-connection prompts, no clipboard manipulation, no hidden forms, and no content cloaking. This lowers the likelihood of an active drainer mechanism, but it does not offset the reputational listing. The page presents a financial product, and that raises the cost of being wrong.
- Homepage: titled as a tokenized U.S. stocks and ETFs offering for global investors, published under a shared-platform subdomain.
- External reputation: one malicious and one suspicious detection against the site, which together form a confirmed blacklist hit.
- Hosting address: 86 abuse reports, discounted because they apply to a shared content-delivery address.
- Behavioural testing (3 of 3 runs completed): no external form posts, no wallet-connection activity, no clipboard writes, no cloaking.
Regulatory Verification Notes
Tokenized securities are a regulated product category, and the evidence contains no licensing or registration reference for the site. On-site disclosure of the operating entity is unclear, and no legal-entity identity could be independently connected to the offering. The operator is therefore unknown. Under the evidence-consistent reading, the site's claims about its product cannot be treated as backed by any authorization. No third-party broker-reputation profile matched the site, so no regulator-style signal exists to counterbalance the reputational listing. The site's technical hygiene is valid but generic and does not speak to legitimacy. The site's name also did not match any entry in the decentralized-finance protocol directory that was checked.
- Homepage: tokenized equity and ETF offering with no identifiable operator or authorization reference in the captured content.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, US.
- Transport encryption: TLS certificate issued by WR1 at DV (domain-validated) level, valid to 2026-11-27 with 36 days remaining. DV validation confirms control of the domain, not the identity of the operator.
- Protocol directory: the site was not found in the decentralized-finance directory.
What to Verify Next
Before any interaction, confirm independently whether the real issuer of tokenized stocks and ETFs publishes this address. Do this by navigating to that issuer's own website through a route not supplied by this page, and by checking the issuer's official channels. Any claimed authorization should be checked with the relevant securities regulator's public register, using the regulator's own search tool. The official support and contact channels should likewise be confirmed through an independent route. Until those checks are complete, no wallet should be connected and no funds or documents should be submitted.
- Homepage: investor-facing offering of tokenized U.S. equities and ETFs that is not tied to a verifiable operator.
- Reputation: the external blacklist hit remains unresolved and should be rechecked after any reported remediation.
- Hosting: the shared-platform subdomain means the address itself offers no standalone brand assurance.
Summary Verdict
The site carries an elevated risk posture. A confirmed external blacklist listing, an unverifiable operator, and a financial-product proposition outweigh the clean browser-behaviour results and the valid encryption. The available evidence does not support treating it as a legitimate venue for sensitive or financial activity.
Infrastructure Integrity
The site is hosted on Amazon infrastructure and published through a shared application-delivery platform. All observed addresses are edge servers in a trusted content-delivery network, and the origin server was not observable. This provides modest protection against direct attack, but it cannot offset the reputation risk and does not indicate that the operator is legitimate. The shared nature of the edge addresses is also why the abuse complaints against the hosting address have been discounted rather than attributed to the site.
Closing Assessment
Interaction should be limited to passive, read-only viewing. Account login, credential entry, wallet connection, and any financial transaction should be avoided until the operator is independently confirmed and the external listing is cleared.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 86 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of ondo-finances.vercel.app.
- The request stayed on ondo-finances.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 64.29.17.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 86 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about ondo-finances.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.