Verdict
Several risk patterns were present. Do not send money or personal details until you have verified this business another way.
fluxbeam-dex.vercel.app is low-trust and potentially risky.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 84 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
FluxBeam DEX is a single-page website that presents itself as a Solana decentralized exchange for Token-2022 assets. Its homepage title advertises token swaps, liquidity provision (LP) and a token launcher. It runs on a free subdomain of a shared application-hosting platform, not on a dedicated branded domain. Its apparent purpose is to draw visitors into a crypto-trading interface where they would swap tokens, supply liquidity or launch tokens.
Scam/Impersonation Risk
The evidence shows confirmed adverse contradictions. Several independent security engines flag the site as malicious or suspicious, and it also appears on an external blacklist. That is a decisive negative, and the reputation signal is directed at the site itself. A site that offers swaps, liquidity deposits and token launching asks users to connect wallets and approve transactions. A malicious variant of that interface can drain assets, so the flags carry heavy weight. The site trades under a branded product name but sits on a free, shared-platform subdomain, so it has no independent domain tied to a verifiable operator. Brand association therefore cannot be established. No conflict between legal entity names was observed, because no legal-entity identity is published to compare. A set of abuse reports exists for the shared hosting address. These are attributed to the platform's shared infrastructure, not to this site specifically, so they are discounted and do not add to the conclusion above. In the controlled browser sessions the page behaved neutrally. It made no external requests, no wallet-connection or clipboard manipulation, no hidden forms and no cloaking. This indicates that the captured homepage state was not actively malicious. It does not offset the external threat detections, since a page can change its content after capture.
- Homepage: titled as a Solana DEX for Token-2022 with swap, LP and token-launcher functions, served from a free shared-platform subdomain.
- Reputation checks: two engines rated the site malicious and one rated it suspicious, alongside an external blacklist entry.
- Shared hosting address: 84 abuse reports, attributed to the shared provider infrastructure and discounted.
- Sandbox runs (3 of 3 successful): zero external requests, no wallet-drainer or clipboard behaviour, no cloaking after interaction.
Regulatory Verification Notes
The homepage gives no verifiable operator identity, licensing statement or corporate registration, and the operator's ownership cannot be tied to a named entity. For a venue that facilitates token swaps and liquidity deposits, this leaves no accountable party to hold responsible for user funds. This is a disclosure gap and does not by itself prove misconduct. Here it compounds the reputation findings above. No regulator listing or third-party broker record was found for the site. The only transport-security evidence is a basic domain-validated certificate, which proves control of the hostname and nothing about the operator. The site was not recognized as an established protocol in the decentralized-finance directory checks.
- Homepage: no named company, registration number, licensing statement or audit reference was identified.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
- Transport security: TLS certificate issued by WR1 (DV validation), valid to 2026-11-27, with 32 days remaining at analysis.
- Broker and regulatory databases: no matching record for this site.
What to Verify Next
Before any interaction, the claimed project should be traced back to its official channels. The official website address for the FluxBeam project should be located through independent, well-established sources such as the project's verified social accounts or major token-tracking directories. It should then be compared against this subdomain. Any smart-contract addresses shown on the page should be checked against those official sources and against a Solana block explorer. The site's claimed audits and operator identity should be confirmed through the issuer's own channels, not through links on the site. Any wallet interaction should be tested only with a disposable wallet that holds no meaningful assets.
- Homepage: Token-2022 swap, LP and launcher features give no contract addresses or audit references that can be checked on-site.
- Hosting: a free shared-platform subdomain is not proof of ownership of the project's official brand.
- Reputation checks: the current malicious and suspicious detections need to be re-checked against the official domain, which should return clean.
Summary Verdict
The assessment places this site at a clearly elevated risk, driven by multiple independent threat detections and a blacklist listing that its technically orderly appearance cannot offset. Its identity cannot be tied to any accountable operator, and nothing in the evidence supports treating it as an established or legitimate venue.
Infrastructure Integrity
The site is served from Amazon-operated address space, and all observed addresses are shared CDN edge nodes. The origin server is not observable, so independent hosting verification is not possible, and content can be swapped quickly without trace. This protective infrastructure and the valid certificate are mitigating factors only. They do not offset the external threat detections.
Closing Assessment
The site should not be used for wallet connection, login, credential entry, token approvals or any financial transaction. Passive viewing is the only proportionate interaction, and only from a device and wallet that hold nothing of value. Anyone who has already connected a wallet or approved a transaction here should revoke token approvals and move assets to a fresh wallet.
Written analysis generated 2026-10-26 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fluxbeam-dex.vercel.app.
- The request stayed on fluxbeam-dex.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 6 |
| Edge IP addresses | 6 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 84 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fluxbeam-dex.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.