Is jumper-dex.vercel.app safe? TrustSniffer's low-trust assessment: 29/100

Overview

Jumper DEX is a single-page decentralized-exchange front end served from a free, platform-provided subdomain. Its homepage is titled "Next-Gen DEX on Solana" and promotes four functions: swapping tokens, bridging assets, providing liquidity through pools, and earning yield. It appears to be an interface for crypto-asset trading and yield generation. The page does not tie that interface to a named company, team, or product publisher.

Scam/Impersonation Risk

Contradictory signals are present. Several independent security engines currently flag the site as malicious, with an additional engine rating it suspicious. The site is therefore blacklisted by external reputation sources, which is a confirmed adverse finding rather than a soft reputational signal. No conflicting legal entities and no specific brand impersonation were identified, so the risk comes from the blacklisting rather than from identity inconsistency. The product category raises the stakes. A site offering swaps, cross-chain bridging, liquidity pools, and yield on Solana is the kind of interface commonly cloned to intercept token approvals and drain wallets. Any DEX front end requires the user to authorize on-chain transactions, and an unreviewed or tampered interface can turn one approval into a total loss. Automated browsing of the homepage did not reproduce wallet-draining, clipboard-hijacking, hidden-form, or cloaking behavior. The page also made no third-party network calls during three successful visits. This is a mitigating observation about that moment only, not an exoneration, and it does not outweigh the active external detections. A large number of abuse reports exist against a network address the site resolves to. They concern a shared content-delivery address used by many unrelated tenants, so they are discounted and not attributed to this site. Evidence:

• Homepage: titled "Jumper DEX — Next-Gen DEX on Solana | Swap, Bridge, Pool & Earn", which advertises trading, bridging, liquidity, and yield functions together.
• External reputation: 3 security engines rate the site malicious and 1 rates it suspicious, and it is listed on at least one external blacklist.
• Behavioral sandbox: 3 of 3 homepage visits succeeded, with 0 external XHR/POST requests, 0 wallet-connect runs, no clipboard writes, and no hidden forms.
• Shared-infrastructure reports: 84 abuse reports against a Vercel content-delivery IP, assessed as reports against the shared provider address and not as evidence against this site.

Regulatory Verification Notes

No licensing or registration information is evident for a service that facilitates asset exchange, cross-chain transfers, and yield products. The on-page disclosure of the operating entity, governing terms, and accountable parties is unclear, and the real-world operator has not been independently connected to the site. No third-party regulatory source confirms the service. In this case the missing disclosure compounds the confirmed external detections instead of standing alone as a neutral transparency gap. The site is not recognized among catalogued DeFi protocols, so no independent record of its liquidity, audits, or operating history supports the "next-gen DEX" positioning. The valid encryption certificate confirms only that traffic is encrypted. It does not attest to the operator's identity or legitimacy. Evidence:

• Homepage: names no operating company, jurisdiction, license, or registration number for the exchange, bridge, or yield functions.
• Transport security: TLS certificate issued by WR1 (DV, domain-validated only), valid to 2026-11-27.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• DeFi recognition: not listed in the DeFi protocol directory checked, so no TVL figure is available to corroborate scale.

What to Verify Next

Verification should start from the project's own claims. First, locate any official announcement, repository, or social channel for a project called Jumper through an independent search, not through links on this page, and check whether it names this exact address as its official site. Second, any program or token contract addresses used by the swap, bridge, and pool functions should be compared against those published in independent block explorers and audit reports. Third, the operating entity and its regulatory status should be confirmed through the relevant national financial-services registry, since none is presented on-site. Finally, the security-engine detections should be re-checked later to see whether they are cleared or confirmed. Evidence:

• Homepage: presents Solana swap, bridge, pool, and earn functions with no linked audit, entity, or registry reference.
• External reputation: the adverse detections are current, so a later re-check would show whether they persist.
• Hosting: the site sits on a shared platform-provided subdomain and not on a distinct, independently registered brand domain, so its ownership has no separate anchor to confirm.

Summary Verdict

The overall posture is elevated risk and is clearly cautionary. External threat detections are decisive and outweigh the site's clean technical hygiene and benign observed behavior. Identity has not been independently established, and the site should be treated as unverified and potentially hostile until the adverse reputation findings are resolved.

Infrastructure Integrity

The site is delivered through Vercel's edge network on Amazon-operated address space, and the observed addresses are all shared edge servers. The origin server was not observable. This provides baseline availability and filtering and a technically sound delivery chain, but it is only a mitigating factor. Edge-only visibility also means content can be swapped quickly without any change in the apparent hosting, so the infrastructure cannot offset the reputational findings.

Closing Assessment

Use should be limited to viewing the page without taking any action. Wallet connections, transaction approvals, deposits, bridging, and account or credential entry should all be withheld. Any funds already exposed to this interface should be reviewed, and token approvals revoked where appropriate. Reconsideration should wait until the external detections are cleared and the operator is independently verified.

Signals weighed against the site

• AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.