Is jumper-solana.vercel.app a scam? TrustSniffer's high-risk assessment: 4/100

Overview

This website is a single-page decentralised-exchange front end that presents itself as "Jumper Solana — The Ultimate DEX on Solana", offering token swaps, cross-chain bridging, liquidity pooling and yield-earning ("Swap, Bridge, Pool & Earn"). It is published on a free subdomain of a general-purpose application-hosting platform, not on a domain of its own. Its apparent purpose is to act as a crypto-asset trading and bridging interface that borrows the name of a well-known cross-chain bridge aggregator.

Scam/Impersonation Risk

Contradictory signals are present. Multiple independent threat-intelligence engines currently flag the domain as malicious or suspicious, and an external blacklist listing is confirmed. This is a confirmed blacklist hit, and it is the decisive factor in the assessment. The pattern fits the profile of a lookalike crypto front end. It uses a borrowed product name, a "the ultimate DEX" superlative, and a bundle of swap, bridge, pool and earn functions on a throwaway-style subdomain, and these are the conditions under which wallet-draining and fake-interface campaigns usually operate. No conflicting legal entities were found, so there is no identity contradiction in the strict sense, and no on-site evidence of a specific impersonated entity was captured. Automated sandbox runs observed no wallet-connection prompts, clipboard tampering, hidden forms, cloaking or third-party data posting on the captured page. That is a mitigating observation about current page behaviour, but it does not offset the listings, because interface content can be swapped after the fact. About ninety abuse reports exist against one of the site's addresses. They attach to shared platform infrastructure used by many unrelated sites, carry a zero abuse-confidence rating, and are discounted as not specific to this domain. Evidence:

• Homepage title and content present a Solana DEX offering swap, bridge, pool and earn functions, with no independent link to the brand it resembles.
• Reputation checks show four malicious and one suspicious engine verdicts, plus a confirmed external blacklist listing against the domain.
• Abuse reports (90) tie to a shared hosting address, are whitelisted by usage type, and carry no domain-specific weight.
• Sandbox behaviour across three successful runs showed zero external requests and no wallet-drainer, clipboard-hijack or hidden-form activity.

Regulatory Verification Notes

The captured homepage does not establish an operator, legal entity, jurisdiction or financial-services authorisation, even though it offers trading, bridging and yield products that would ordinarily fall under virtual-asset or securities rules. This is a verification gap, and the ownership opacity compounds it, because no accountable party can be tied to the service. No third-party broker or regulator record matched this site. Nothing here is a regulatory verdict, but a service that handles user funds while naming no accountable party cannot be treated as a supervised venue. The only credible provenance anchors are technical and do not speak to legitimacy. Evidence:

• Homepage: no named operator, registration number, licence or governing-law statement was identified.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, country US.
• Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27 with 33 days remaining.
• No third-party broker-reputation record matched the site.

What to Verify Next

Before any interaction, confirm whether the real project this site resembles publishes this exact address on its official channels. Use channels reached independently, such as the project's verified social accounts or documentation, not links found on this site. Check whether any financial regulator or virtual-asset registry lists a legal entity operating this service. Confirm the official support and contact channels offline or through the genuine project's own channels. Do not rely on a valid padlock icon, since DV certificates are issued to any domain holder, including malicious ones. Evidence:

• The site sits on a shared-platform subdomain, so no first-party domain exists whose ownership could be checked.
• The certificate is domain-validated only, so it proves control of the hostname and nothing about the operator.
• The yield, pooling and bridging claims on the homepage carry no named counterparty or audit reference.

Summary Verdict

Overall posture is high risk. Confirmed blacklist listings and converging adverse reputation signals override the clean page behaviour and the valid encryption. The available evidence does not support treating this site as a legitimate or trustworthy trading venue.

Infrastructure Integrity

The site resolves entirely to edge addresses of a recognised content-delivery and application-hosting platform, running on Amazon-operated network space in the United States, and the origin server was not observable. That platform reputation and the valid certificate are mitigating factors only. Infrastructure of this kind is available to any publisher, including malicious ones, so it provides no evidence of legitimacy and cannot offset the external threat detections. Edge-only visibility also prevents independent hosting verification and can mask rapid content swaps.

Closing Assessment

Do not connect a wallet, sign transactions, enter credentials, or send funds or tokens through this site. Browsing without interaction is the only proportionate use, and anyone who has already interacted should revoke wallet approvals and move assets to a fresh wallet.

Signals weighed against the site

• AbuseIPDB: 90 reports on hosting IP 64.29.17.195 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.