Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
nx8kf.pages.dev shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
Monad Bridge is a single-page website on a shared, free-hosting platform subdomain rather than a branded domain of its own. Its homepage carries the title "Monad Bridge" and only a few lines of text, and the name suggests a cross-chain asset bridge for the Monad blockchain ecosystem. The page offers a visitor almost no product explanation, company description, or support content. Its apparent purpose is to draw users into bridging or transferring digital assets, a business model that handles user funds directly.
Scam/Impersonation Risk
Contradictory signals are present, and they decide this assessment. Several independent threat-intelligence sources currently classify the site as malicious or suspicious, and the combined reputation record amounts to a confirmed blacklist listing. This is a serious signal for a site that presents itself as a financial-transfer utility. The pattern matches throwaway phishing pages. These are thinly populated pages on disposable subdomains that borrow the name of a popular blockchain product to attract users searching for a legitimate bridge. The name "Monad Bridge" on a shared-platform subdomain, with no evidence of a link to any official project, fits that pattern. Live behavioural testing found no wallet-connection prompts, clipboard tampering, hidden forms, or page cloaking in the sessions captured. That absence does not clear the site, because a malicious payload can be activated later, or only for certain visitors, without leaving a trace in a short sandbox session. No conflicting legal identities were found, because the page names no legal entity at all. The harm here comes from the reputation findings and the nature of the service the page implies, not from conflicting identity claims. Evidence:
- Homepage: multiple independent reputation engines flag the site as malicious or suspicious, and an external blacklist listing is confirmed.
- Homepage: the page title reads "Monad Bridge", with only a very short block of visible text and no product detail, which fits a placeholder or lure page.
- Homepage behaviour: roughly 50 external background requests and 3 external form submissions were observed across 3 test runs. None went to unrecognised destinations, and no wallet-drainer, clipboard-hijack, hidden-form, or cloaking behaviour was detected.
Regulatory Verification Notes
The site gives no verifiable regulatory standing. The homepage names no operating company, jurisdiction, registration number, or licence, and it has no terms, privacy, or risk-disclosure pages. A service that moves digital assets for users would normally publish these. Identity on the page is therefore unestablished, and nothing on it links the site to a real organisation or to the Monad ecosystem. No broker or regulatory-database entry matched, so no third-party regulatory opinion exists to weigh. The missing disclosures are a transparency gap on their own. They matter here because they sit alongside the reputation findings above. The technical baseline is routine and gives no assurance of legitimacy. A valid certificate is cheap to obtain and does not show who runs the site. Evidence:
- Homepage: no legal entity, licence, registration number, contact details, or governing-jurisdiction statement is published.
- Hosting: served from AS13335 (Cloudflare, Inc., US), with the site on a shared-platform subdomain.
- Transport encryption: TLS certificate issued by WE1, domain-validated (DV) only, valid to 2026-12-21 with about 53 days remaining.
What to Verify Next
Anyone who encountered this site through a link, advertisement, or social-media message should check whether the Monad project has announced a bridge at all. Use only the project's official documentation and verified social accounts, reached by typing the address or using a saved bookmark, not by following links from the site or from the message that led to it. Any claimed bridge address should be checked against that official list. The independent reputation listings should be re-checked later, since a flag can be cleared if the host removes the content. It should also be confirmed that no wallet connection, signature, or token approval was granted to this site. If one was, the approval should be reviewed and revoked. Evidence:
- Homepage: the page does not link to any official project documentation or verified announcement channel.
- Homepage: no named operator, contact route, or support channel is published through which a claim could be confirmed.
Summary Verdict
The site carries an elevated, high-risk trust posture. Confirmed adverse reputation findings combine with a thin, unattributed page that implies a fund-handling service. Technical hygiene is basic and offsets none of it. The evidence does not support treating the site as a legitimate bridge operator.
Infrastructure Integrity
The site is delivered through Cloudflare's content-delivery and web-application-firewall network. All four observed addresses (two IPv4, two IPv6) are Cloudflare edge servers, and the origin server was not observable. This is a mitigating factor only, since it shows the hosting platform is mainstream and the connection is protected in transit. Edge-only visibility also means the hosting cannot be independently verified, and the page content can be swapped quickly without any change in the visible network footprint. The infrastructure does not offset the threat-intelligence findings.
Closing Assessment
Read-only viewing is the most this site warrants. No wallet should be connected and no signature or token approval granted. No credentials, seed phrases, or payment details should be entered, and no assets transferred. Nothing should be downloaded from it. Any bridging should be done only through addresses confirmed by the project's official channels.
Written analysis generated 2026-10-29 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of nx8kf.pages.dev.
- The request stayed on nx8kf.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2fcc |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-21 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about nx8kf.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.