Is allbridge-bridge.vercel.app a scam? TrustSniffer's high-risk assessment: 24/100

Overview

This website presents itself as "Allbridge Bridge", a cross-chain stablecoin bridge for EVM networks. It is a single-page interface that invites visitors to move tokens between blockchains, and it is served from a free subdomain on a shared application-hosting platform rather than from a dedicated brand domain. Its apparent purpose is a token-transfer service that would require visitors to interact with crypto wallets and approve on-chain transactions.

Scam/Impersonation Risk

Hard contradictory signals are present. Several independent threat-intelligence sources currently list this site as malicious or suspicious, and the combined result amounts to a confirmed blacklist condition. The hostname fuses a well-known bridge protocol's name with the generic word "bridge" on a platform subdomain that anyone can create at no cost. That is a classic brand-lookalike pattern, and nothing observed ties the site to the genuine protocol's operators. The homepage describes a bridge for moving stablecoins between EVM networks. Services of this kind routinely ask visitors to sign token approvals and transfers, so a lookalike front-end would be positioned to redirect funds. Abuse reports exist against the shared edge address the site resolves to. Those reports are attributed to the hosting platform's shared infrastructure and are discounted, so they are not counted against the site itself. Browser-behaviour testing was comparatively benign. The page made no external requests, showed no wallet-drainer, clipboard-hijack or hidden-form behaviour, and did not cloak its content. Clean behaviour in a short sandbox session does not offset the external threat listings, and a wallet-interaction flow could behave differently once a real wallet is attached. Evidence:

• Homepage: the title and content present a cross-chain stablecoin bridge for EVM networks under the Allbridge name, hosted on a platform-issued subdomain.
• Domain provenance: the hostname was first observed about 26 days ago, with a single web-archive snapshot from 2026 (1 year tracked), so there is no history of legitimate operation.
• Reputation: two security engines rate the site malicious and one suspicious, against 57 harmless verdicts and 32 with no verdict. Abuse reports on the shared edge IP (103) are attributed to shared infrastructure.
• Behaviour: three of three sandbox runs completed with no external requests, no wallet-provider activity and no DOM manipulation after interaction.

Regulatory Verification Notes

The site presents no verifiable operator identity, legal entity, licence or registration. This is a disclosure gap on the page and is not, by itself, evidence of wrongdoing. Its weight here comes from sitting alongside the threat listings. Identity could not be independently connected to the real protocol, so no claim of affiliation with it can be accepted. No third-party broker or regulatory record was matched. The site is also not recognised in any DeFi protocol directory, which fits a lookalike deployment better than an established protocol front-end. Evidence:

• Homepage: the page offers no named company, jurisdiction, licence or registration number.
• Technical: the site is served from AS16509 (AMAZON-02, Amazon.com, Inc., US).
• Transport security: the TLS certificate is issued by WR1 at domain-validation (DV) level and is valid to 2026-11-27, about 36 days remaining. It confirms only control of the hostname, not the operator's identity.
• Directory check: no DeFi protocol directory listing and no TVL record exist for this hostname.

What to Verify Next

Any prospective interaction should begin by establishing whether the genuine protocol operates this front-end. That means obtaining the official address from the protocol's documentation or verified social channels, not from links, search ads or messages that led here, and comparing it with this hostname. Official support channels should be confirmed independently, and the protocol's published security notices should be checked for warnings about lookalike front-ends. If any token approvals have already been granted to contracts linked to this site, they should be reviewed and revoked with a reputable approval-management tool. Evidence:

• Homepage: the hostname differs from any dedicated brand domain, which is the first thing to compare with the official address.
• Reputation: current malicious and suspicious detections mean the page should be treated as unsafe for transactions until cleared.
• Provenance: the very recent first sighting of the hostname gives no prior record to rely on.

Summary Verdict

The available evidence supports a clearly cautionary, high-risk posture. Active threat-intelligence listings, a brand-lookalike hostname and an absence of any verifiable operator or history outweigh the clean technical hygiene and benign sandbox behaviour. Identity is unverified, and the site cannot be treated as an authentic service.

Infrastructure Integrity

The site resolves entirely to edge addresses of a protective CDN/WAF layer on Amazon-operated hosting in the United States, and the origin server is not observable. This layer is a mitigating factor only. It shows the site is hosted on a mainstream platform, but it does nothing to establish who operates the site or whether it is legitimate. Edge-only visibility also means page content can be swapped quickly without any change to the visible infrastructure.

Closing Assessment

Do not connect a wallet, sign messages, approve token spending, or enter credentials or funds on this site. Passive viewing is the only reasonably safe use. Anyone needing a bridge should use only an address obtained independently from the genuine protocol's official channels.

Signals weighed against the site

• AbuseIPDB: 103 reports on hosting IP 216.198.79.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.