Is fluxbeam-solana.vercel.app safe? TrustSniffer's low-trust assessment: 29/100

Overview

This website presents itself as a decentralized exchange on the Solana blockchain. Its page title bills it as the "first SPL22-enabled DEX on Solana" with Token-2022 support. It is published as a project-style subdomain on a shared application-hosting platform, not on an independently registered domain. A visitor sees a single-page crypto trading front end whose apparent purpose is token swapping and related on-chain activity, which normally involves connecting a wallet and authorising transactions.

Scam/Impersonation Risk

Several independent threat-intelligence engines currently flag this site as malicious or suspicious, and it also carries an external blacklist listing. This is the decisive finding of the assessment. The site is blacklisted and warrants a clearly cautionary posture. No brand impersonation, conflicting legal identities or confirmed phishing kit were established. The risk comes from the third-party detections, not from a documented identity contradiction. Reports of abuse against the shared platform edge address were also seen. These attach to infrastructure serving many unrelated tenants, so they were discounted and are not attributed to this site. The exposure is sharpened by the product category and the hosting arrangement. Newly launched Solana token-exchange front ends that make a "first-to-support" claim are a common vehicle for wallet-draining and fake-swap schemes. A free subdomain on a shared platform costs nothing to create or abandon, and it lends the page no brand or ownership credibility. In automated behavioural runs the page made no external requests and showed no wallet-connection attempts, hidden forms, clipboard manipulation or cloaking. This is a mitigating observation about the unauthenticated landing page only. It does not show what happens once a wallet is connected or a transaction is requested. Evidence:

• Homepage: the title promotes a "first" Token-2022 (SPL22) DEX on Solana. This is an unverifiable superlative and the site's only concrete product claim in the captured content.
• Hosting subdomain: the site runs on a shared-platform subdomain with no independent registered domain, so the operator can be swapped or removed with no persistent identity.
• Behavioural runs on the homepage: stable successful responses, no external network activity, no wallet-provider interaction and no hidden or credential-harvesting forms across all runs.
• Third-party reputation: multiple engines return malicious or suspicious detections and an external blacklist entry is active. Abuse reports on the shared edge IP are discounted as shared-infrastructure noise.

Regulatory Verification Notes

The captured homepage does not establish who operates the exchange, under which legal entity, or under what licence or registration. Real-world operator identity is therefore unverified. Any claims the page makes about itself cannot be treated as proof of legitimacy. A financial-trading product of this kind would ordinarily be expected to identify a legal operator and its jurisdiction, and those disclosures are not evident. This is a verification gap, not a finding of fraud by itself. Here it compounds the third-party detections. No broker-reputation entry matched the site, so no external regulatory signal either supports or counters it. The transport encryption is valid, but a domain-validated certificate only proves control of the hostname. It says nothing about the operator. Evidence:

• Homepage and available site content: no named legal entity, jurisdiction, licence or registration number is evident.
• Transport security: TLS certificate issued by WR1 (domain-validated, DV), valid to 2026-11-27.
• Network origin: served from AS16509 (AMAZON-02 – Amazon.com, Inc., US), registry ARIN, country US.

What to Verify Next

Before any interaction beyond reading, the project's claimed identity should be tested outside the site itself. The "first SPL22-enabled DEX" claim, and any token or program addresses the site shows, should be checked against Solana's public explorers and against the official channels of any recognised project with a similar name. Those channels should be reached by independent search, not by links on this page. Any licensing or registration claim should be confirmed with the relevant financial regulator's public register. Official support and social channels should be confirmed through a separate route from the page. If any wallet prompt appears, the requested permissions and the receiving program should be inspected before anything is signed. Evidence:

• Homepage: Token-2022 and first-mover claims that need confirmation against on-chain records.
• Site hosting: the subdomain gives no stable brand anchor, so an official domain must be established independently.
• Third-party reputation: the active detections should be rechecked with the reporting engines before any change in posture.

Summary Verdict

The site sits in a low-trust, elevated-risk posture. Active external threat detections outweigh the benign behaviour seen on its landing page and the valid encryption. The operator's real-world identity is unverified, so legitimacy cannot be presumed. Its category (an unaffiliated crypto exchange front end) is high-risk by nature.

Infrastructure Integrity

The site sits behind a trusted cloud and edge-delivery platform. All observed addresses are edge servers, and no origin server was observable. This provides ordinary availability and DDoS protection, which mitigates infrastructure-level exposure only. It does not offset the external threat detections, and it limits independent verification of what is actually hosted behind the edge.

Closing Assessment

The site should be limited to read-only viewing. No wallet should be connected, no transaction signed, no credentials entered and no funds sent until the operator is independently identified and the active threat detections are cleared.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.