Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
portal-orbio.digital is low-trust and potentially risky.
| What this site appears to be | Marketing/product page for Orbio: a marketplace and gateway selling prepaid API credits (1 CREDIT = $1 of AI usage). Credits are purchased, discounted by offers from ORBIO holders, and used via Orbio-managed gateway keys. The site documents pricing, recent buys, API snippets, compatibility with OpenRouter/OpenAI/Anthropic SDKs, and analytics. Credits are non-redeemable for cash and platform takes a fee. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 6 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 15 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website is an Orbio-branded portal presenting a marketplace for discounted AI API access, with account-based usage, prepaid credits, and gateway services intended to route requests to external model providers.
Scam/Impersonation Risk
The site presents a high-risk sensitive-interaction profile because external threat intelligence recorded malicious detections and a confirmed blacklist hit for the domain. This is a decisive contradiction to the otherwise professional product presentation. The homepage describes a custodial prepaid-credit model in which users purchase CREDIT, receive access through an Orbio-managed gateway key, and rely on a marketplace where ORBIO holders offer unused credits; credits are non-redeemable for cash and the platform collects a fee. That combination creates exposure to deposited funds, opaque value flows, and service delivery risk. No conflicting legal identities or brand-impersonation indicators were identified, but the operator’s real-world identity remains unverified.
- External reputation checks recorded 6 malicious and 2 suspicious detections, with the domain also identified on a confirmed external blacklist.
- The domain was registered on 2026-10-02 and is approximately 0.04 years old; registration records identify Dynadot Inc. as registrar.
- Historical coverage records 2 archive snapshots, first seen on 2026-10-02 and last seen on 2026-10-11, with 1 year tracked.
- The homepage’s product description documents prepaid CREDIT purchases, Orbio-managed gateway keys, holder-discounted offers, non-cash redemption, and platform fees.
Regulatory Verification Notes
The available pages do not establish an independently verified operating entity, licensing position, or regulatory status. The on-site presentation includes product, pricing, API, sign-in, and purchase/top-up functionality, but the supplied evidence does not show a verified company registration, license claim, or accountable legal operator. This is a material disclosure gap for a service that accepts prepaid value and manages access credentials, although the absence of a license claim is a verification issue rather than proof of fraud. The site’s valid transport certificate and identifiable hosting are technical controls only and do not validate the business or its operator.
- The homepage contains a sign-in form and a purchase/credit-top-up form, while no verified license authority or license number is presented in the available business-model disclosures.
- Hosting telemetry identifies AS13335, CLOUDFLARENET - Cloudflare, Inc., US.
- The site’s TLS certificate is issued by YE2 at DV validation level and is valid to 2026-12-31T08:08:55+00:00.
What to Verify Next
Before any sensitive interaction, an independent check should establish the legal entity responsible for the service and confirm any licensing or registration obligations applicable to prepaid digital credits, token activity, and custodial account operation. Payment protection, refund treatment, credit expiry, complaint handling, and the relationship between the named model providers and the portal should also be confirmed through independently sourced channels rather than relying solely on the site.
- The homepage states that CREDIT represents AI usage, is purchased in advance, cannot be redeemed for cash, and is subject to a platform fee; these terms require independent confirmation before funds are committed.
- The site advertises compatibility with OpenRouter, OpenAI, and Anthropic SDKs; those provider relationships should be confirmed through the providers’ independently published channels.
- The account and purchase/top-up functions create a need to validate the official support and account-recovery channels before credentials or payment details are entered.
Summary Verdict
The website has a low-trust posture with a material risk of harmful or unauthorized sensitive interaction. Its coherent product presentation and functioning technical delivery do not overcome the confirmed external reputation contradictions, the unverified operator identity, and the governance concerns associated with its value-handling model.
Infrastructure Integrity
The site is served through Cloudflare’s CDN/WAF infrastructure, with observed addresses limited to CDN edge servers and no origin candidate identified in this analysis. This reduces direct origin exposure and is a mitigating infrastructure characteristic, but it neither establishes legitimacy nor offsets the external threat detections.
Closing Assessment
Prospective users should restrict activity to passive viewing and avoid account access, credential submission, or financial transactions until the operator, applicable regulatory position, and payment protections have been independently established.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, page content, history in the web archive, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Page content
- The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 55/100 |
| Identity verification confidence | 60% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of portal-orbio.digital.
- The request stayed on portal-orbio.digital. It was not redirected to another domain. Clear
- Registration is published under Dynadot Inc. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-02. Noted
- The earliest public archive of this site is from 2026-10-02. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Dynadot Inc |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::6815:3177 |
| Name servers | rob.ns.cloudflare.com, melissa.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-31 |
| Domain age | 0.04 years (continuous registration) |
| Domain expiry | 2027-10-02 |
| Archive first seen | 2026-10-02 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 6 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about portal-orbio.digital at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.