Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
nervos-mainnet.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 4 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 1.8 years oldRegistered history | Clear |
| Web archive | Archived since 20242 snapshots | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: 1 to 3 years (registration continuity).
- Public web-archive history exists since 2024.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page web front end titled "Nervos Network." It is served from the hostname "nervos-mainnet" on a free, shared project-hosting platform rather than from a standalone branded domain. It presents itself as a mainnet portal for a blockchain project, and its apparent purpose is to act as that project's web presence. The relationship between this page and any genuine Nervos project team has not been independently established.
Scam/Impersonation Risk
Contradictory signals are present, and they carry the weight of this assessment. Several independent security engines currently flag the site as malicious or suspicious. It is also listed on at least one external blacklist and has a known phishing association in its history, so this is a confirmed blacklisting, not a soft reputational signal. No conflicting legal identities were observed, and the sandbox found no wallet-connection prompt, clipboard manipulation, hidden form or content cloaking. The absence of those behaviours does not offset the blacklisting. A project-branded "mainnet" label on a free shared-hosting subdomain is a pattern commonly used to pass a page off as an official crypto-project portal. That makes the name and platform combination a further reason for caution. During automated browsing the page also generated heavy third-party traffic. Many background requests and a substantial number of outbound POST submissions went to destinations outside the expected set of known services, and the page produced a high volume of script errors. Data may therefore leave the page toward unrecognised endpoints during ordinary use. Evidence:
- Homepage: external reputation sources return malicious and suspicious detections, and the site appears on an external blacklist.
- Homepage behaviour: 82 external background requests and 22 external POST submissions were recorded, 12 of the POSTs to non-whitelisted destinations, along with 57 console errors.
- Archive provenance: the domain shows about 1.8 years of registration continuity, with only 2 archive snapshots over 1 year tracked (first seen 2024-12-31), which is a thin history for a project presenting as a mainnet.
Regulatory Verification Notes
The captured homepage does not disclose a legal entity, a licence or a registration identifier. No regulated-status match exists in any third-party dataset, and no broker-reputation record matched this site. Presenting itself as a blockchain network portal without any named operator or accountability channel means the on-page identity claims cannot be treated as proof of a real-world organisation. This is a verification gap, and the blacklisting above is the separate and weightier concern. The transport encryption is valid but is only a domain-validated certificate. It confirms an encrypted channel and says nothing about who operates the site. Evidence:
- Homepage: no named operator, licence or registration identifier is visible, and no third-party regulatory match exists.
- Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-12-31.
- Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
The authenticity of the "Nervos Network" branding should be tested against the official Nervos channels. These are the project's documented domain and its verified social and developer pages, reached independently rather than through any link on this site. Any claim that this hostname is an official mainnet, wallet or claim portal should be checked there before the site is relied on in any way. Any contact or support channel shown on the site should be confirmed through that same independent route. Evidence:
- Homepage title and hostname both assert a Nervos mainnet identity, which only the official project channels can confirm or refute.
- No legal entity or operator is named on the captured page, so there is nothing on-site to cross-check.
Summary Verdict
The overall posture is high-risk. Confirmed external blacklisting and multi-engine malicious detections outweigh the site's technically orderly attributes, such as continuous archive presence and a valid certificate. The real-world operator is unverified, and the identity presented by the page is unsupported by independent evidence. The site is not suitable for sensitive interaction.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin server was not observable, so the true hosting location cannot be independently confirmed. This protective layer is a mitigating factor only. It guards availability, but it does not vouch for the content or the operator, and it cannot offset the reputational detections recorded against this site.
Closing Assessment
Read-only viewing is the most this site warrants. Wallets should not be connected, credentials or seed phrases entered, funds sent, or files downloaded from it. Anyone who has already interacted with it should treat any exposed credentials or wallet approvals as compromised and rotate or revoke them.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, external reputation, registration and ownership, behaviour in a sandbox.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
04 Behaviour in a sandbox
- The page exchanged network traffic with destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_TRAFFIC - The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page made background requests to destinations TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_XHR
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of nervos-mainnet.pages.dev.
- The request stayed on nervos-mainnet.pages.dev. It was not redirected to another domain. Clear
- The earliest public archive of this site is from 2024-12-31. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2fa4 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-31 |
| Domain age | 1.82 years (continuous registration) |
| Domain expiry | Not available |
| Archive first seen | 2024-12-31 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 4 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about nervos-mainnet.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.