---
title: "Is mainnet-resolver.pages.dev a Scam? Trust Score 5/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "mainnet-resolver.pages.dev"
verdict: "Critical Risk"
title: "Is Pages a scam? mainnet-resolver.pages.dev 5/100"
trust_score: 5
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/mainnet-resolver.pages.dev
assessed: 2026-11-01
---

# Is Pages a scam? TrustSniffer's high-risk assessment of mainnet-resolver.pages.dev: 5/100

## Verdict


**Verdict: Critical Risk, trust score 5/100.** mainnet-resolver.pages.dev shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-11-01 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 14 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2.2 years old (Registered history) | Clear |
| Web archive | Archived since 2024 (55 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the mainnet-resolver.pages.dev homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/mainnet-resolver.pages.dev/screenshots/first.png)

_What mainnet-resolver.pages.dev served when TrustSniffer captured it on 2026-11-01. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents a single landing page titled "Multichain - Cross-Chain Router Protocol". It sits on a free subdomain of a shared developer-hosting platform, not on a standalone branded domain. The visible content is a short text page in the style of a cross-chain bridging or routing service. Its apparent purpose is to look like a decentralized-finance routing protocol that asks visitors to interact with blockchain assets. The page content could not be analysed in depth, so no specific products, yields or leverage claims could be extracted.


### Scam/Impersonation Risk

Contradictory signals are present, and they converge on a clearly cautionary reading. The domain is **confirmed blacklisted** by external reputation sources. A substantial cluster of security engines flags it as malicious, including several tier-one vendors, and one further engine rates it suspicious. That is enough to trigger an automatic ceiling on the site's trust assessment. The site's name also fits a recognised lookalike pattern. It borrows the title of a known cross-chain router brand while hosted on a generic shared-platform subdomain, and a shared subdomain cannot show any link to that brand. This is a branding mismatch. Site-controlled evidence does not establish a conflicting legal identity. Sandbox behaviour was otherwise unremarkable: no wallet-connection prompts, wallet-drainer routines, clipboard manipulation, hidden forms, credential posts to third parties, or content cloaking were observed. This clean behavioural run does not offset the confirmed external detections. A page that behaves benignly during automated visits can still be used for targeted lures or later content swaps. The page also made a heavy volume of external background requests during rendering. All went to recognised destinations, but the pattern adds modest noise to the picture. Evidence:

- Homepage: the page title presents the site as a cross-chain router protocol under the Multichain name while served from a shared-platform subdomain.
- External reputation: a large group of security engines, including several tier-one vendors, flag the domain as malicious, and it is blacklisted.
- Domain provenance: first observed in 2024, roughly 2.2 years old, with 55 archive snapshots spanning 2024–2026 (3 years tracked) and no sign of repurposed content.
- Sandbox: three of three browser runs completed with no wallet-drainer, clipboard-hijack, hidden-form or cloaking behaviour, and 74 external background requests were made.

### Regulatory Verification Notes

The captured page discloses no operating company, licence, registration number or governing jurisdiction. Because the captured content was limited, this is a gap in what was observed and not a finding about the operator. No third-party broker or regulator record matched the site, and none attests to its legitimacy. Identity could not be independently tied to any real-world entity or to the brand named in the page title. The transport layer is technically sound, but that says nothing about operator legitimacy. Domain-validated certificates are issued automatically to any controller of a domain. Evidence:

- Homepage: no company name, licence, registration number or legal-entity disclosure is visible.
- Hosting: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-28, with a SAN list present.
- Broker reputation database: no matching record.

### What to Verify Next

Before any engagement, the claimed brand should be matched against its official domain, published through channels independent of this page, such as the brand's verified social profiles or documentation. Any claim of licensing or protocol operation must be checked against the relevant registry. Any wallet address or contract on the page must be confirmed independently before funds are sent. Official support and contact channels should be established through an offline or separate route. Evidence:

- Homepage title: it names a specific protocol brand that must be matched to that brand's official domain.
- Hosting: the shared-platform subdomain is a different class of address from a project's own registered domain.
- Reputation: the external detections should be re-checked before any interaction is reconsidered.

### Summary Verdict

The overall posture is high risk and clearly cautionary. External threat detections are decisive and outweigh every mitigating technical attribute. Identity remains unverified, and the site cannot be treated as a legitimate counterpart on the evidence available.


### Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four resolved addresses (IPv4 and IPv6) are edge nodes. The origin server was not observable, so independent verification of the underlying host is not possible, and edge-only visibility can mask rapid content changes. The protective layer and trusted network provider are mitigating factors only. They do not offset the reputation findings, because the same infrastructure also serves unrelated, legitimate sites.


### Closing Assessment

The site should be treated as read-only at most, and only from an isolated environment. No wallet connection, credential entry, asset transfer or payment should occur, and nothing should be downloaded. Anyone who has already interacted with it should review wallet permissions and rotate any exposed credentials.


_Written analysis generated 2026-11-01 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

4 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox, registration and ownership.

### 01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`)

### 02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 03 Behaviour in a sandbox
- A large share of what the page loaded came from other domains. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_MODERATE`)
- The page made many background requests to other domains while it was open. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_XHR_HEAVY`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of mainnet-resolver.pages.dev.

- The request stayed on mainnet-resolver.pages.dev. It was not redirected to another domain. (Clear)
- The earliest public archive of this site is from 2024-08-22. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2fca |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-28 |
| Domain age | 2.19 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-08-22 |
| Archive snapshots | 55 |
| Reputation | VirusTotal: 14 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about mainnet-resolver.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [snapshots-kamino-102.pages.dev](https://trustsniffer.com/report/snapshots-kamino-102.pages.dev), a similar name (Critical Risk, 0/100)
- [sitemk63isk5921x.pages.dev](https://trustsniffer.com/report/sitemk63isk5921x.pages.dev), a similar name (Critical Risk, 0/100)
- [snapshots-v4-102.pages.dev](https://trustsniffer.com/report/snapshots-v4-102.pages.dev), a similar name (Critical Risk, 6/100)
- [snapshots-argus-102.pages.dev](https://trustsniffer.com/report/snapshots-argus-102.pages.dev), a similar name (Critical Risk, 0/100)
- [votes-virtualagent-21.pages.dev](https://trustsniffer.com/report/votes-virtualagent-21.pages.dev), a similar name (Critical Risk, 0/100)
- [mrmigglesbase-appclaim.pages.dev](https://trustsniffer.com/report/mrmigglesbase-appclaim.pages.dev), a similar name (Critical Risk, 5/100)
- [mainetsapps.pages.dev](https://trustsniffer.com/report/mainetsapps.pages.dev), a similar name (Critical Risk, 0/100)
- [abster-zr41n3r-sol.pages.dev](https://trustsniffer.com/report/abster-zr41n3r-sol.pages.dev), a similar name (Critical Risk, 21/100)
- [jogocorporativo.com.br](https://trustsniffer.com/report/jogocorporativo.com.br), another site assessed as critical-risk (Critical Risk, 0/100)
- [a2service.com](https://trustsniffer.com/report/a2service.com), another site assessed as critical-risk (Critical Risk, 5/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [How to revoke token approval after a scam site](https://trustsniffer.com/blog/how-to-revoke-token-approval-after-a-scam-site)
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/mainnet-resolver.pages.dev) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/mainnet-resolver.pages.dev · assessed 2026-11-01.*