Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
migratedashboard.xyz shows high-risk / scam indicators.
| What this site appears to be | Migrate.fun is a Solana token migration page showing claim statistics for a migration from MFT to nub, with a wallet-connect prompt to check claim eligibility. It gives no operator identity, contract address, or audit information. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | None flagged itVirusTotal | Clear |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 26 days oldMost scam domains are under a year old | Risk |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- No flags from the reputation services TrustSniffer consulted at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as "Migrate.fun – Token Migration Platform", a Solana token-migration claim dashboard. Its single page shows aggregate claim statistics for a migration from a token called MFT to a token called nub, and prompts the visitor to connect a Solana wallet to check eligibility and claim tokens. The apparent purpose is to route holders of the legacy token into a wallet-connected claim flow. The page names no operator, and its menu also advertises "Create" and "Stake" functions.
Scam/Impersonation Risk
The assessment is clearly cautionary. A third-party threat-intelligence source currently blacklists the domain, and this is the decisive contradiction. A wallet-connect claim flow is the delivery mechanism most commonly abused in token-migration lures, so a listed domain that asks for a wallet connection warrants a high-risk posture. The domain is also very newly registered, which fits a short-lived campaign. The site presents itself under a different name from its domain: the page title and branding read "Migrate.fun", while the domain is a separate "migratedashboard" name. No independent link between the two is shown. No brand impersonation was confirmed, but the mismatch leaves the site's claim to represent any known migration unsupported. The homepage figures are internally consistent. Claimed plus unclaimed tokens equal the claimable total of roughly one billion, and the claimed breakdown sums correctly. Coherent arithmetic is trivial to fabricate and does not demonstrate a real migration. The page contradicts itself on timing: a countdown reads "Claims close in 85d 2h", while the progress panel states "Duration: 4 days". A visible 65% completion figure and a "Total Claimed" counter of roughly 647 million tokens add social proof that nothing on the page substantiates. Nothing on the page names a token contract or mint address, an audit, or documentation of the migration. A visitor therefore cannot tell which asset the wallet interaction would touch. Automated browsing runs observed no hidden forms, clipboard manipulation, or credential fields. However, the wallet-connect step itself was never exercised, so the signing behaviour is unknown. Evidence:
- Homepage: the claim dashboard carries a "Connect Wallet" prompt for Solana, with no contract address, audit, team, or legal entity anywhere on the page.
- Homepage: the countdown ("Claims close in 85d 2h") conflicts with the stated "Duration: 4 days".
- Domain registered 2026-09-23 (about 26 days old) through NICENIC INTERNATIONAL GROUP CO., LIMITED, with expiry in 2027-09.
- Homepage branding ("Migrate.fun") does not match the domain name it is served from.
Regulatory Verification Notes
The site has no legal, terms, privacy, about, or contact pages. It names no operating entity, jurisdiction, licence, or registration number, and it describes no custody or dispute process for tokens a user might claim. Because the flow ends in a token claim, the absence of any accountable party matters here. The site reveals nothing about who bears responsibility if a claim goes wrong. Its business model is classified as a token or crypto project, with an unverifiable legal status flagged. No third-party broker or regulator record matched the site, and none is relied on here. The only reputational signal is the threat listing described above, which is a security finding and not a regulatory one. Evidence:
- Homepage: the page text contains no operator name, registration detail, licence statement, or legal-notice link.
- Hosted on AS13335 (Cloudflare, Inc., US); all observed addresses belong to that network.
- The TLS certificate is DV-level, issued by YE2 and valid to 2026-12-22. It proves only domain control, not operator identity.
What to Verify Next
The migration's legitimacy must be established outside this site. The MFT-to-nub migration should be confirmed through the original project's own announcements or documentation, reached by an independently sourced route rather than any link on this page. The official token mint addresses should be compared against any address this site might later present. The official channels should also be asked whether this domain is an authorised claim portal. If the project has no record of it, the site should be treated as unauthorised. A wallet holding meaningful value should not be used for testing. If any interaction is attempted at all, a separate empty wallet should be used. Evidence:
- Homepage: no contract address is published, so the asset involved cannot be checked on-chain from the page.
- Homepage: the claim figures and the countdown cannot be matched to any project record from the page alone.
- Domain was registered about 26 days before this assessment, so any genuine project announcement should postdate that date and be easy to confirm.
Summary Verdict
The site is assessed as high-risk. It is a newly created, threat-listed, anonymous page that asks for wallet interaction around an unevidenced token migration. The technical hygiene of its page delivery is ordinary and offsets none of that. There is no basis for treating it as an authorised or legitimate migration portal.
Infrastructure Integrity
The site is served entirely through Cloudflare's network, so every observed address is a shared edge address and the origin server is not visible. The hosting address space has a clean abuse history, and the transport certificate is valid. These are minor mitigating factors. They show only that the domain is competently fronted. They do not speak to the operator's intent, and they cannot offset the external threat listing.
Closing Assessment
Do not connect a wallet, sign any message or transaction, or approve any token permission on this site. Anyone who believes they are owed a migration should reach the original project through channels they already trust. Any wallet already connected to this domain should have its permissions reviewed and revoked.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, page content, registration and ownership, behaviour in a sandbox.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
03 Page content
- The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The page has no description for search engines, which established sites usually provide.Page content
rule:PAGE_SEO_MISSING_META
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
05 Behaviour in a sandbox
- The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of migratedashboard.xyz.
- The request stayed on migratedashboard.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-23. Noted
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::ac43:ce9f |
| Name servers | JOSEPHINE.NS.CLOUDFLARE.COM, OLOF.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-22 |
| Domain age | 0.07 years (continuous registration) |
| Domain expiry | 2027-09-23 |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 0 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about migratedashboard.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.