Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
jumperexchange.vercel.app shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 14 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 84 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Certificate | Encrypted connectionIssued by WR1 | Noted |
| Hosted by | AMAZON-02Server in US | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page crypto-asset interface titled "Jumper | Multi-Chain Bridging & Swapping (powered by LI.FI)". It is served from a free subdomain on a shared application-hosting platform rather than from a dedicated brand domain. The homepage presents a short block of text describing cross-chain bridging and token swapping, which suggests a front end for moving digital assets between blockchains. The visible content is thin, and its business purpose rests on that self-description alone.
Scam/Impersonation Risk
This is the decisive section of the assessment. Several major security vendors independently classify the site as malicious, and the combined detections are well above the level treated as a confirmed blacklisting. The site is therefore blacklisted by external threat intelligence, and the identity contradiction is real even though no conflicting legal entities were found. The site carries the name and positioning of a known multi-chain bridging and swapping aggregator, but it sits on a free, shared-platform subdomain with a very close lexical resemblance to the hosting platform's own domain. Nothing independent connects it to the genuine product operator, so it cannot be treated as the genuine service. Bridging and swapping interfaces are a favoured vehicle for wallet-draining and fake-front-end schemes, because a single approval or signature can transfer control of a user's assets. A large volume of abuse reports also exists against the address the site resolves to. That address is shared hosting infrastructure used by many unrelated tenants, so those reports are discounted and are not attributed to this site. Sandbox testing did not observe wallet-connection attempts, drainer behaviour, clipboard tampering, hidden forms, cloaking or credential posts to external hosts. This absence does not offset the blacklist signal, because a malicious payload can be gated behind a real wallet interaction that an automated visit never performs. Evidence:
- Homepage: the page title and wording present a "multi-chain bridging & swapping" service "powered by LI.FI", but the site is served from a shared-platform subdomain with no brand-owned domain.
- Reputation checks: 14 malicious and 1 suspicious detections from external security engines, including three top-tier vendors. A sandbox visit found no wallet-connection or drainer activity.
- Shared-address reports: 84 abuse reports against the resolving address, discounted as belonging to shared provider infrastructure.
Regulatory Verification Notes
The captured page carries no legal entity name, licence, registration reference, terms of service or privacy disclosure. Only about 630 characters of text were readable. Nothing on the site links it to a regulated or identifiable operator, and the available evidence does not establish the real-world operator's identity. No third-party broker or regulator-style reputation entry was matched, so no reputational context exists beyond the threat detections above. Ownership and governance are opaque. Free-subdomain hosting on a shared platform also means the site has no independent registration record to anchor identity. Evidence:
- Homepage: no operator name, licence number, jurisdiction, terms or privacy policy is visible in the captured text.
- Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, country US.
- Transport encryption: TLS certificate issued by WR1, domain-validated (DV) only, valid to 2026-11-27. DV confirms control of the hostname only, not operator identity.
- Sandbox behaviour: 48 external XHR/fetch calls, 9 external POST requests (3 to non-allowlisted hosts) and 105 console errors across 3 successful runs.
What to Verify Next
Before any interaction, the legitimate operator's official address should be obtained from an independent source, such as the aggregator's verified social profiles, its documentation or an established directory of crypto applications. That address should be compared with this subdomain. Anyone who reached the site through a link, advertisement or direct message should treat the referral channel as suspect. Anyone who has already connected a wallet or signed anything on this site should review active token approvals with a reputable approval-checker and revoke any that are unrecognised. The operator's official contact channels should be confirmed through an independent route. Evidence:
- Homepage: the brand claim is unsupported by any visible operator disclosure or link to an official presence.
- Sandbox: three external POST requests to non-allowlisted destinations were observed, so any interaction should be assumed to transmit data to third parties.
- Reputation checks: the detections are current, so earlier favourable results should not be relied on.
Summary Verdict
The site carries an elevated, high-risk posture. Current external detections are decisive and outweigh the technically orthodox transport and hosting posture. The brand it presents cannot be independently tied to the genuine service. Its safe use is limited to passive viewing.
Infrastructure Integrity
The site resolves entirely to edge addresses within Amazon's network, served through a recognised CDN/WAF platform, with a valid DV certificate from a known issuer. Infrastructure trust is normal. No origin server is observable, so independent hosting verification is not possible and content could be swapped quickly without any visible change in the network footprint. Protective infrastructure is a mitigating factor only. It does not offset the threat detections and says nothing about the legitimacy of the operator.
Closing Assessment
The site should not be used for wallet connection, token approvals, transaction signing, login or any payment or credential entry. Passive viewing in an isolated browser is the only low-risk use. Anyone needing the real bridging service should reach it only through an independently verified official address.
Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Behaviour in a sandbox
- A large share of what the page loaded came from other domains.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_MODERATE - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 84 reports on hosting IP 216.198.79.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of jumperexchange.vercel.app.
- The request stayed on jumperexchange.vercel.app. It was not redirected to another domain. Clear
- It is hosted on AMAZON-02, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 216.198.79.67 |
| Name servers | Not available |
| CDN / edge network | Detected |
| Resolved IP addresses | 8 |
| Edge IP addresses | 8 |
| Likely origin IP addresses | 0 |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 14 flagged | AbuseIPDB: 0% confidence, 84 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about jumperexchange.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.