--- title: "Is blockstreampc.app a Scam? Trust Score 5/100" source: TrustSniffer type: Website trust & fraud report subject: "blockstreampc.app" verdict: "Critical Risk" title: "Is blockstreampc.app a Scam? Risk Report, Score 5/100" trust_score: 5 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/blockstreampc.app assessed: 2026-10-19 --- # Is blockstreampc.app a scam? TrustSniffer's high-risk assessment: 5/100 ## Verdict **Verdict: Critical Risk, trust score 5/100.** blockstreampc.app shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-19 by automated analysis. Classification confidence 55%. | Field | Value | | --- | --- | | What this site appears to be | Official product page for Blockstream Desktop, a desktop Bitcoin workstation focused on self-custody, Lightning, and Liquid network tooling. Page includes features, FAQ, supported hardware wallets, open-source claim and links to community channels. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 13 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 0% confidence (AbuseIPDB, 59 reports; shared hosting inflates reports) | Clear | | Domain age | Not available (No registration record was returned) | Noted | | Web archive | Never archived (No public history of this site) | Watch | | Certificate | Encrypted connection (Issued by YR2) | Noted | ## The page as captured ![Screenshot of the blockstreampc.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/blockstreampc.app/screenshots/first.png) _What blockstreampc.app served when TrustSniffer captured it on 2026-10-19. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. ## Full analysis ### Security Alert Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution. This website presents Blockstream Desktop as a Windows desktop Bitcoin workstation for self-custody, Lightning and Liquid Network operations. Its stated purpose is to provide software for transaction execution, portfolio management, multisignature controls, hardware-wallet orchestration and institutional-style Bitcoin operations rather than to accept direct user deposits. ### Scam/Impersonation Risk No conflicting legal-entity names or explicit brand-impersonation indicators were observed in the supplied page content. However, the site is subject to a confirmed blacklist finding and multiple external malicious detections, including 13 malicious and one suspicious determination across the evaluated reputation checks. This is a decisive contradiction to the otherwise professional presentation of the homepage and warrants a security-forward posture. The abuse reports associated with shared delivery infrastructure are not treated as site-specific evidence because their attribution was explicitly discounted; the independent malicious detections and blacklist status remain material. The site should not be used for login, credential submission, financial activity or software downloading while these findings remain unresolved. Evidence: - The homepage presents “Blockstream Desktop” as a Bitcoin workstation with self-custody, Lightning and Liquid functionality. - External reputation checks recorded 13 malicious and 1 suspicious detections, with three security vendors contributing flagged results. - The evaluated domain was marked by an external blacklist, while the major safe-browsing result supplied separately was not malicious. ### Regulatory Verification Notes The site’s apparent business model is software provision for Bitcoin self-custody and related network operations, including multisignature vaults, air-gapped signing, hardware-wallet support, Lightning management and Liquid asset functions. The homepage links to legal, privacy, terms, contact and documentation pages, but the supplied evidence does not show a claimed license, registration number or licensing authority. That is a regulatory-verification gap rather than proof of fraud; the real-world operator relationship to the Blockstream brand remains only apparently established, not independently verified. No matching broker-reputation record was supplied. Evidence: - The homepage states that the product is “fully open-source” and supports Jade, Ledger and Trezor hardware wallets. - The homepage links to legal, privacy, terms, contact and documentation pages. - Hosting resolved to AS16509, Amazon.com, Inc., US. - The site’s TLS certificate is issued by YR2 at DV validation level and is valid through 2026-12-11T08:06:22+00:00. ### What to Verify Next Before any sensitive interaction, an enterprise reviewer should independently confirm that the domain and Windows application are officially associated with the Blockstream organization through an established, separately sourced corporate channel. The application should be obtained only through a verified official distribution path and subjected to endpoint malware scanning and signature or hash validation before execution. The applicable legal entity, regulatory obligations and any required licensing should be confirmed through the relevant official registry, and the contact and support channels should be validated through an independent offline route. Evidence: - The homepage provides a “Download for Windows” option and links to GitHub and community channels, creating a concrete distribution chain to validate. - The homepage exposes separate legal, terms, privacy and contact destinations for independent review. - The supplied behavioral assessment recorded no login form, hidden form, wallet-provider detection, wallet-drainer activity or clipboard-write activity during three successful runs. ### Summary Verdict The overall posture is **critical trust risk** because strong external security contradictions override the site’s polished content, coherent product presentation and benign observed page behavior. The website should be treated as an untrusted destination for sensitive interaction until the external detections and apparent brand relationship are independently resolved. ### Infrastructure Integrity The website is protected by Vercel CDN/WAF infrastructure, with all observed addresses identified as CDN edge servers and no origin candidate observed in the analysis. This provides a mitigating layer against direct origin exposure but does not establish legitimacy or offset the external security findings. ### Closing Assessment Restrict activity to passive review pending independent validation, and do not log in, provide credentials, conduct financial activity or execute downloaded software from the site. _Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 4 findings contributed to this verdict, raised by governance, external reputation, registration and ownership, page content. ### 01 Governance - A threat feed lists this domain as malicious, and that caps the score whatever the other checks found. (Governance `rule:GOV_CRITICAL_BLACKLIST`) - What the site offers, as described on its own pages, limits how high the score can go until more of it can be verified. (Governance `rule:gov_business_model_cap`) ### 02 External reputation - An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`) ### 03 Registration and ownership - The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`) ### 04 Page content - The page carries none of the structured previews for search and social sharing that established sites usually provide. (Page content `rule:PAGE_SEO_NO_STRUCTURED`) ### Signals weighed against the site - AbuseIPDB: 59 reports on hosting IP 216.198.79.65 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | LIKELY | | Identity score | 73/100 | | Identity verification confidence | 74% | - Trusted social count=1 _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of blockstreampc.app. - The request stayed on blockstreampc.app. It was not redirected to another domain. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 216.198.79.65 | | Name servers | Not available | | CDN / edge network | Detected (vercel) | | Resolved IP addresses | 2 | | Edge IP addresses | 2 | | Likely origin IP addresses | 0 | | SSL issuer | YR2 | | SSL expiry | 2026-12-11 | | Domain age | Not available (no registration date was returned) | | Domain expiry | Not available | | Archive first seen | Not available | | Archive snapshots | 0 | | Reputation | VirusTotal: 13 flagged \| AbuseIPDB: 0% confidence, 59 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about blockstreampc.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [robinhood-main-dex-lrt.netlify.app](https://trustsniffer.com/report/robinhood-main-dex-lrt.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [robinhood-main-dex-mqt.netlify.app](https://trustsniffer.com/report/robinhood-main-dex-mqt.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [robinhood-main-dex-uwx.netlify.app](https://trustsniffer.com/report/robinhood-main-dex-uwx.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [coinmarketcap-votev421.netlify.app](https://trustsniffer.com/report/coinmarketcap-votev421.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [portal-moonshot-2qw.netlify.app](https://trustsniffer.com/report/portal-moonshot-2qw.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [portal-moonshot-4x3.netlify.app](https://trustsniffer.com/report/portal-moonshot-4x3.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [portal-moonshot-h5r.netlify.app](https://trustsniffer.com/report/portal-moonshot-h5r.netlify.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [checker-hyperfoundation.app](https://trustsniffer.com/report/checker-hyperfoundation.app), another .app site assessed as critical-risk (Critical Risk, 0/100) - [mediafires.co](https://trustsniffer.com/report/mediafires.co), another site assessed as critical-risk (Critical Risk, 0/100) - [ethnobs.ru](https://trustsniffer.com/report/ethnobs.ru), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance) - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) --- *Source: [TrustSniffer](https://trustsniffer.com/report/blockstreampc.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/blockstreampc.app · assessed 2026-10-19.*