Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
reward-ondo.app shows high-risk / scam indicators.
| What this site appears to be | A rewards dashboard for Ondo Points, the Ondo Foundation's offchain, non-transferable points program tied to wallet holdings and campaign participation. Users connect a wallet to view points and rank, and claim windows for undisclosed rewards are planned. No login form, deposit, or return promise is present in the extracted text. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 1 report; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
| Hosted by | ROUTERHOSTINGServer in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website reward-ondo.app presents itself as "My Ondo Points | Ondo Foundation", a rewards dashboard for an offchain, non-transferable points program tied to wallet holdings and campaign participation in the Ondo ecosystem. A visitor sees a Connect Wallet prompt to view points and rank across Ethereum, Mantle and Solana, plus tabs for Campaigns, Leaderboard and Rewards, with navigation labels (About, Blog, Flux, Governance, Ondo DAO, Ondo Token, Vote, Discuss) that mimic the Ondo Foundation's own site. Its apparent purpose is to drive wallet connections and "claim" interactions around the ONDO token. The page describes no deposits, yield or returns.
Scam/Impersonation Risk
This site carries confirmed contradictory signals and warrants a clearly cautionary posture. The domain is currently blacklisted by external threat-intelligence sources, and one top-tier security vendor flags it. Several additional engines classify it as malicious or suspicious. The content analysis did not confirm brand impersonation, and no conflicting legal identities appear. However, the domain is a hyphenated, newly created lookalike built around the Ondo name. The page uses the Ondo Foundation's name, navigation and token branding without any independently verifiable link to the genuine organization. That combination, with an active blacklist listing, is the classic profile of a wallet-targeting lookalike page. The page's own mechanics add to the concern. Value flow is opaque: reward types, claim timing, eligibility requirements and "discretionary" exclusion rules are all described as "to be published". Rewards are therefore unspecified, while the central call to action is wallet connection and "Claim Rewards". In sandbox runs the page contacted many external destinations, with 111 external background requests and 7 external form submissions. Three of those submissions went to non-whitelisted destinations. No wallet-drainer, clipboard-hijack or hidden-form behavior was observed in those runs. A single abuse report against the hosting IP is attributed to shared provider infrastructure and is discounted, so it is not weighed against the site. Evidence:
- Homepage: branded as the Ondo Foundation points program, with a Connect Wallet prompt for Ethereum, Mantle and Solana and a "Claim Rewards" button, but no named legal entity or contact channel in the extracted text.
- Homepage: claim windows, reward types and requirements are stated only as to be published later, so what a user would receive is undefined.
- Domain provenance: registered 2026-09-24 (~25 days old), through NICENIC INTERNATIONAL GROUP CO., LIMITED, with registrant details incomplete.
- Network behavior: 111 external background requests and 7 external form submissions, 3 of them to non-whitelisted destinations.
Regulatory Verification Notes
The site names no licensed entity, registration number or regulator, and it publishes no legal, terms or privacy pages in the captured content. The only identity claim is the "Ondo Foundation" branding itself, and nothing independent corroborates it, so the operator's real-world identity remains unverified. This is a disclosure gap rather than proof of wrongdoing, but here it sits alongside the confirmed threat-intelligence listing. No third-party broker or regulatory-database record matched this domain, so there is no outside reputational context to offset the listing. The site's own statement that points are non-transferable and carry no promised return is the only legal-style language on the page, and it is not a substitute for entity disclosure. Evidence:
- Homepage and navigation: no legal entity, license, jurisdiction or terms link is shown.
- Technical identity: TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-23, which confirms domain control but says nothing about the operator.
- Hosting: served from AS14956 (RouterHosting LLC, US), a generic data-center host rather than any infrastructure associated with the genuine foundation.
What to Verify Next
Before any interaction, the page should be checked against the genuine Ondo Foundation's officially published channels, reached independently of this domain, to confirm whether any points program is run at this address. Links to the genuine site should come from the foundation's established social accounts or documentation, not from this page or from messages that point to it. Wallets holding meaningful balances should not be connected to this domain. If a connection has already occurred, the wallet's token approvals should be reviewed and any unfamiliar permissions revoked. Reward claims and campaign instructions should be confirmed through the foundation's official announcements, and official support channels should be located offline from this site. Evidence:
- Homepage: Connect Wallet and Claim Rewards actions are the only interactive paths, and both depend on wallet interaction.
- Homepage: leaderboard and campaign tabs reference campaign pages that need independent confirmation of existence on the genuine site.
- Domain history: the domain is only weeks old, so no track record exists that could substitute for official confirmation.
Summary Verdict
The available evidence supports an elevated-risk assessment. A confirmed blacklist listing, a very young lookalike domain and an unverifiable operator outweigh the otherwise polished page content and valid encryption. The site cannot be treated as an authentic Ondo Foundation property, and it is unsuitable for any sensitive or financial interaction.
Infrastructure Integrity
The site sits behind Cloudflare CDN/WAF protection, and its only observed IP belongs to an edge address in a RouterHosting LLC network in the United States. The origin server was not observable, which limits independent hosting verification and can mask rapid content swaps. The protection is a mitigating factor only and cannot offset the reputational findings.
Closing Assessment
The site should be treated as read-only at most. No wallet connection, login, credential entry, signing request or payment should be made on it until the genuine Ondo Foundation has independently confirmed that this address is official.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, page content, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 1 report on hosting IP 172.86.114.109 (RouterHosting LLC, Data Center/Web Hosting/Transit), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of reward-ondo.app.
- The request stayed on reward-ondo.app. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-24. Noted
- It is hosted on ROUTERHOSTING, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | ROUTERHOSTING - RouterHosting LLC, US |
| Country | US |
| Server IP | 172.86.114.109 |
| Name servers | annalise.ns.cloudflare.com, chris.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 1 |
| Edge IP addresses | 1 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-23 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-24 |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 1 report | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about reward-ondo.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.