Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
blockstreampc.app shows high-risk / scam indicators.
| What this site appears to be | Official product page for Blockstream Desktop, a desktop Bitcoin workstation focused on self-custody, Lightning, and Liquid network tooling. Page includes features, FAQ, supported hardware wallets, open-source claim and links to community channels. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 13 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 59 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by YR2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents Blockstream Desktop as a Windows desktop Bitcoin workstation for self-custody, Lightning and Liquid Network operations. Its stated purpose is to provide software for transaction execution, portfolio management, multisignature controls, hardware-wallet orchestration and institutional-style Bitcoin operations rather than to accept direct user deposits.
Scam/Impersonation Risk
No conflicting legal-entity names or explicit brand-impersonation indicators were observed in the supplied page content. However, the site is subject to a confirmed blacklist finding and multiple external malicious detections, including 13 malicious and one suspicious determination across the evaluated reputation checks. This is a decisive contradiction to the otherwise professional presentation of the homepage and warrants a security-forward posture. The abuse reports associated with shared delivery infrastructure are not treated as site-specific evidence because their attribution was explicitly discounted; the independent malicious detections and blacklist status remain material. The site should not be used for login, credential submission, financial activity or software downloading while these findings remain unresolved.
- The homepage presents “Blockstream Desktop” as a Bitcoin workstation with self-custody, Lightning and Liquid functionality.
- External reputation checks recorded 13 malicious and 1 suspicious detections, with three security vendors contributing flagged results.
- The evaluated domain was marked by an external blacklist, while the major safe-browsing result supplied separately was not malicious.
Regulatory Verification Notes
The site’s apparent business model is software provision for Bitcoin self-custody and related network operations, including multisignature vaults, air-gapped signing, hardware-wallet support, Lightning management and Liquid asset functions. The homepage links to legal, privacy, terms, contact and documentation pages, but the supplied evidence does not show a claimed license, registration number or licensing authority. That is a regulatory-verification gap rather than proof of fraud; the real-world operator relationship to the Blockstream brand remains only apparently established, not independently verified. No matching broker-reputation record was supplied.
- The homepage states that the product is “fully open-source” and supports Jade, Ledger and Trezor hardware wallets.
- The homepage links to legal, privacy, terms, contact and documentation pages.
- Hosting resolved to AS16509, Amazon.com, Inc., US.
- The site’s TLS certificate is issued by YR2 at DV validation level and is valid through 2026-12-11T08:06:22+00:00.
What to Verify Next
Before any sensitive interaction, an enterprise reviewer should independently confirm that the domain and Windows application are officially associated with the Blockstream organization through an established, separately sourced corporate channel. The application should be obtained only through a verified official distribution path and subjected to endpoint malware scanning and signature or hash validation before execution. The applicable legal entity, regulatory obligations and any required licensing should be confirmed through the relevant official registry, and the contact and support channels should be validated through an independent offline route.
- The homepage provides a “Download for Windows” option and links to GitHub and community channels, creating a concrete distribution chain to validate.
- The homepage exposes separate legal, terms, privacy and contact destinations for independent review.
- The supplied behavioral assessment recorded no login form, hidden form, wallet-provider detection, wallet-drainer activity or clipboard-write activity during three successful runs.
Summary Verdict
The overall posture is critical trust risk because strong external security contradictions override the site’s polished content, coherent product presentation and benign observed page behavior. The website should be treated as an untrusted destination for sensitive interaction until the external detections and apparent brand relationship are independently resolved.
Infrastructure Integrity
The website is protected by Vercel CDN/WAF infrastructure, with all observed addresses identified as CDN edge servers and no origin candidate observed in the analysis. This provides a mitigating layer against direct origin exposure but does not establish legitimacy or offset the external security findings.
Closing Assessment
Restrict activity to passive review pending independent validation, and do not log in, provide credentials, conduct financial activity or execute downloaded software from the site.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by governance, external reputation, registration and ownership, page content.
01 Governance
- A threat feed lists this domain as malicious, and that caps the score whatever the other checks found.Governance
rule:GOV_CRITICAL_BLACKLIST - What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified.Governance
rule:gov_business_model_cap
02 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
04 Page content
- The page carries none of the structured previews for search and social sharing that established sites usually provide.Page content
rule:PAGE_SEO_NO_STRUCTURED
Signals weighed against the site
- AbuseIPDB: 59 reports on hosting IP 216.198.79.65 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of blockstreampc.app.
- The request stayed on blockstreampc.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.65 |
| Name servers | Not available |
| CDN / edge network | Detected (vercel) |
| Resolved IP addresses | 2 |
| Edge IP addresses | 2 |
| Likely origin IP addresses | 0 |
| SSL issuer | YR2 |
| SSL expiry | 2026-12-11 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 13 flagged | AbuseIPDB: 0% confidence, 59 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about blockstreampc.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.