Is velodrome.info a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at velodrome.info is a single-page landing site whose title reads "Velodrome on Optimist – The Velodrome is here". It borrows the name of a decentralized-finance trading protocol and presents a short promotional message of roughly five hundred characters. It shows no visible product mechanics, figures or documentation, so its apparent purpose is to act as an entry point for a DeFi-style trading or liquidity service, though that cannot be confirmed from the page content.

Scam/Impersonation Risk

This domain carries confirmed adverse external reputation. Multiple independent security engines classify it as malicious or suspicious, and at least one tier-one security vendor flags it. This is a confirmed blacklisting, and it is the decisive factor in the assessment. The domain is also absent from public DeFi protocol directories, even though the homepage title trades on the name of an established DeFi protocol. That gap matters because a site using a recognisable protocol brand without being registered as that protocol's presence is a classic lure pattern. No second legal-entity name or conflicting identity was observed, and the page does not explicitly claim a known institution's identity, so this is a reputational and brand-borrowing concern, not a demonstrated impersonation. The registration history reinforces it. The domain's archived record begins in 2003 with sparse, intermittent captures, but the current registration is only months old, which is consistent with a lapsed domain being re-acquired and repurposed. The nature of the earlier content and the new owner's identity cannot be established from the evidence. In mitigation, the sandbox runs found no wallet-connection prompts, clipboard tampering, hidden forms, outbound data posts or content cloaking. This shows that no active theft mechanism was triggered during testing. It does not offset the reputation findings.

Regulatory Verification Notes

The homepage captured for analysis offers no identifiable operating company, jurisdiction, licensing statement or registration number, and the on-page disclosure position is unclear. The domain's registration details are incomplete and ownership is opaque, which in a financial-services context removes the usual means of attributing responsibility for the service. This is an ownership-opacity and disclosure matter, not an identity contradiction. It is noted as a transparency limitation and not as proof of wrongdoing. No third-party broker or regulator-database entry matched this domain. The website's identity could not be independently linked to any real-world brand or person. The valid certificate and standard registrar record establish only that the domain is technically operational, not who operates it.

What to Verify Next

Any interaction should begin by establishing whether this domain is an officially endorsed property of the genuine protocol it names. That means checking the protocol's own documentation, social channels and community announcements, reached independently by typed address or trusted bookmark and not through this site. The registrar's abuse and ownership-change process can be used to ask whether the domain changed hands recently. If the site claims to offer regulated financial services, its licensing should be confirmed directly with the relevant financial registry.

Summary Verdict

The deterministic assessment places this website in the lowest trust tier, with a clearly high-risk posture. Confirmed adverse reputation from independent security sources is decisive, and the apparent repurposing of an older domain under a borrowed protocol identity compounds it. The absence of overtly malicious behaviour in sandbox testing does not change the classification, and the operator's real-world identity remains unestablished.

Infrastructure Integrity

The site is delivered through Cloudflare's content-delivery and web-application-firewall network, and all observed addresses are CDN edge servers, so the origin host is not visible. The transport-layer configuration is sound, with a valid certificate and a recognised issuer. This is a mitigating factor only: it protects the site against ordinary attack and says nothing about the legitimacy of the operator. Edge-only visibility also prevents independent hosting verification and allows content to be swapped without a change in the observable address, which limits how much the clean infrastructure can offset the reputation findings.

Closing Assessment

This site should not be used for login, credential entry, wallet connection or any financial transaction. At most, it may be viewed in a read-only manner, and any genuine protocol should be reached only through independently confirmed official channels.