Is migrates-brickken.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Brickken – Staking Dapp" interface on a domain that pairs a migration-themed label with the Brickken name. It presents very little visible text, only a short staking-application landing page. Its apparent purpose is to draw visitors into a token staking or migration flow under a recognizable blockchain-platform name. The real-world operator behind it has not been independently established.

Scam/Impersonation Risk

The site is blacklisted by external threat-intelligence sources. Multiple major security engines, including several top-tier vendors, currently flag the domain as malicious, and this is the decisive factor in the assessment. The page borrows an established platform's brand name together with the "migrates" wording and the generic staking-dapp framing. That combination fits a common pattern in which lookalike domains lure holders into a fake token migration or staking event. The evidence does not include a confirmed side-by-side impersonation finding. The brand association therefore stays unverified, but it cannot be separated from the malicious reputation signals. The homepage offers little content to establish legitimacy. A staking interface asks a visitor to connect a wallet and approve token permissions, and the sandbox did not observe a wallet connection being triggered. That means the risky step may sit behind interaction the automated visit did not reach. The sandbox observed no wallet-drainer behavior, clipboard tampering, hidden forms or cloaking. It did record that a large share of the page's network activity went to third-party services. No conflicting legal identities were found, because the site publishes no legal or identity pages that could conflict. The harm vector is the reputation hit, not an internal contradiction. Evidence:

• Homepage: a minimal staking-dapp page titled for the Brickken brand, carrying only a few hundred characters of text and no company, team, or product detail.
• External reputation: a substantial number of security engines rate the domain malicious, including several tier-one vendors, and the site is listed on an external blacklist.
• Domain provenance: registered 2026-08-06 (~0.22 years old); the web archive holds 1 snapshot, first and last seen 2026-08-10.
• Sandbox behavior: three successful visits, a high proportion of external requests, and no wallet-provider interaction detected.

Regulatory Verification Notes

The site presents no licensing, registration, or legal-entity information. Nothing on the page identifies an operator, jurisdiction, terms, or privacy policy. A staking or migration service handling user tokens would be expected to disclose these, so the disclosure gap is real. The domain registration record is also incomplete, which leaves ownership opaque. These gaps are verification points only. They are not evidence of wrongdoing on their own, and the blacklisting above is what drives the cautionary posture. No third-party broker or regulatory-database entry matched the site, so no external signal supports any regulated status. Evidence:

• Homepage: no operator name, license number, registration details, or legal pages.
• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED; registration expires 2027-08-06 with an incomplete ownership record.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-02.

What to Verify Next

Anyone who encountered this domain through a message, advertisement, or social post should check the claimed migration or staking announcement against the official Brickken channels. They should reach those channels by typing the address manually or through an independently sourced bookmark, not through the link that led here. The legitimate project's own documentation should be checked for any announced migration and its official domain. The official support or contact channels should also be confirmed through that independent route. Anyone who already connected a wallet or signed a transaction on this domain should review and revoke token approvals and should treat the wallet's exposure as potentially compromised. Evidence:

• Homepage: the staking-dapp framing and migration-themed domain name are the claims to compare against the project's official announcements.
• Domain history: a registration only weeks old with a single archive capture means no established track record can corroborate the site's claims.
• Reputation: the current malicious ratings give a concrete reason to treat any invitation to this domain as unverified.

Summary Verdict

The overall posture is high risk. Current malicious ratings from multiple security vendors, together with a very young domain and an unestablished operator, outweigh the technically sound transport setup. The site presents the profile of a likely lure or lookalike property that has not earned any trust.

Infrastructure Integrity

The site sits behind a mainstream CDN and web application firewall from Cloudflare, with a valid TLS certificate. All observed addresses are edge servers, and the origin host is not visible. This is a mitigating factor only and does not offset the reputation findings. Shielding the origin also prevents independent verification of where the content is actually hosted.

Closing Assessment

The domain should not be used for wallet connections, logins, credential entry, token approvals, or any financial transaction. At most it should be viewed passively, and only from a device and wallet that hold no valuable assets. Reporting the link to the platform it appears to invoke is the proportionate response.