Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
blasterswaps.vercel.app is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 93 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
BlasterSwap is a single-page decentralized-exchange front end, published on a free subdomain of a shared application-hosting platform. Its homepage title presents it as a "next-gen DEX on Blast L2" that offers token swapping, yield farming ("farm") and token launches ("launch"). Its apparent purpose is to get visitors to trade, stake liquidity or participate in launches on the Blast layer-2 network. Visitors would most likely do this through a wallet-connected interface, so the site operates in the financial-transaction category.
Scam/Impersonation Risk
The evidence shows confirmed contradictions, and the site warrants a clearly cautionary posture. Independent security engines currently flag the site as malicious, with a further engine rating it suspicious, and an external blacklist hit corroborates this. Because the blacklist is confirmed, the site cannot be treated as a neutral unknown. A prior phishing association also contributes to the elevated assessment. The homepage presents itself in the "Swap, Farm, Launch" format that fraudulent DeFi front ends commonly use. Interfaces that touch wallet approvals and token launches are high-value targets for drainer and rug-pull abuse. The hostname is also a free subdomain whose name closely resembles the platform's own root domain. This offers no independent brand anchor and makes the site easy to replace or clone. The sandbox found no active malicious behaviour. It recorded no outbound data posts, no wallet-drainer or clipboard-hijack activity, no hidden forms and no cloaking. This is the only mitigating behavioural finding, and it does not offset the external detections. A large volume of abuse reports exists against one of the site's shared hosting addresses. These were discounted, because they relate to infrastructure used by many unrelated tenants and not to this site specifically. No conflicting legal identities were found. Evidence:
- Homepage: the page title advertises a DEX on Blast L2 with swap, farm and launch functions, which are fund-handling features.
- External reputation: 2 malicious and 1 suspicious detections against 58 harmless and 32 undetected verdicts, plus a confirmed external blacklist hit.
- Behavioural sandbox: 3 of 3 runs succeeded, with no external network activity, no wallet-drainer or clipboard-write behaviour and no cloaking.
- Hosting reputation: 93 abuse reports on a shared provider address were attributed to shared infrastructure and discounted.
Regulatory Verification Notes
The homepage gives no clear disclosure of a legal entity, a licence or a registration, and the operator is not identified. Ownership and governance opacity are both present. The site's real-world identity could not be independently connected to any brand or person, and no page-based analysis could establish one. A platform that handles swaps, farming and token launches would normally disclose its operator and terms, and the evidence shows none. This is a verification gap and not by itself proof of a scam, but here it sits alongside the confirmed reputational contradictions. No third-party broker or regulator record matched this site, so no outside regulatory context is available to offset the gaps. Evidence:
- Homepage: no legal entity, licence or registration details are identifiable in the captured content.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), a major hosting operator whose use does not identify the site's operator.
- Transport encryption: the TLS certificate is DV-level, issued by WR1 and valid to 2026-11-27, which confirms encryption but not who controls the site.
What to Verify Next
Before any interaction, the project's existence should be checked independently through its official channels, such as a documentation site or social profile reached from a trusted source and not from this site. Any claimed token or contract address should be compared with the project's officially published addresses and with a blockchain explorer, which can show deployment history and holder concentration. Anyone considering participation should also look for a named team, an audit report from an identifiable security firm, and a regulator or registry listing for any claimed licence. Wallet approvals should not be granted on this site, and none should be signed until this checking is complete. Evidence:
- Homepage: the site gives no verifiable operator, audit or licence information, so each of these checks needs an external source.
- Hostname: the free platform-subdomain name closely resembles the platform's own root domain, so official project links must come from an independent source.
- Sandbox: no wallet-provider interaction was triggered during testing, so on-chain behaviour has not been observed.
Summary Verdict
The overall posture is elevated risk, with a clearly cautionary assessment. Confirmed adverse reputation outweighs the benign behaviour and the valid encryption, and the operator's identity remains unverified. The site should be treated as unsuitable for sensitive interaction, and it is appropriate to view it only in a read-only capacity.
Infrastructure Integrity
The site is served behind Vercel's edge network on Amazon-operated address space in the United States. All eight observed addresses are edge nodes, and no origin server was observable. Any hosting verification therefore has to rely on the edge layer alone. The transport certificate is valid and issued by a known authority. This is a mitigating factor only. It does not establish legitimacy, and it does not reduce the reputation risk. Edge-only visibility also means that site content could be swapped quickly without any change in the observable infrastructure.
Closing Assessment
Account login, credential entry, wallet connection and any financial transaction should be avoided. The site may be viewed only in a read-only capacity, and only from a device or browser profile that holds no funds or wallet access. Anyone who has already interacted with it should review and revoke any wallet approvals they granted.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 93 reports on hosting IP 216.198.79.131 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of blasterswaps.vercel.app.
- The request stayed on blasterswaps.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.131 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 93 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about blasterswaps.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.