Is launch-tool.info safe? TrustSniffer's low-trust assessment: 30/100

Security Alert

Fortinet, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

LaunchTool presents itself as a no-code Solana token creator aimed at crypto projects. Its homepage title promotes tooling for launching tokens without writing code, which suggests a service where visitors configure and deploy tokens, probably with some wallet or payment interaction. The domain sits on the uncommon .info extension and was registered only days before this assessment.

Scam/Impersonation Risk

Confirmed contradictions are present, and they drive a clearly cautionary posture. The domain is on an external blacklist, and two major security vendors independently classify it as malicious, with an additional vendor rating it suspicious. Reputation sources also associate the domain with known phishing activity. The analysis did not record an on-page phishing event or a named brand being impersonated, so these signals reflect third-party reputation rather than a demonstrated on-page deception. The domain is also newly registered and has almost no history. A crypto token-launch service is a category where wallet-connection and payment flows attract fraudulent operators, so this combination sharply raises the risk of sensitive interaction. No conflicting legal-entity names were found across identity pages, so there is no identity contradiction. The sandbox saw no external network calls, wallet-provider prompts, clipboard manipulation or hidden forms on the pages it exercised. That is a mitigating observation, but it does not offset the external threat listings, and behavior on deeper flows such as token deployment was not exercised. Evidence:

• External threat intelligence: the domain is blacklisted, with two malicious and one suspicious vendor verdicts, including detections from two tier-one security vendors (Fortinet, Sophos).
• Domain provenance: registered 2026-10-11 (about 10 days old, ~0.03 years), expiring 2027-10-11, with a one-year registration term.
• Web-archive depth: only 2 archive snapshots, both captured in October 2026, so no meaningful history exists.
• Homepage behavior: three sandbox runs returned stable HTTP 200 responses with no external requests and no DOM changes after interaction.

Regulatory Verification Notes

The homepage promotes token-creation services, but the captured evidence contains no licensing, registration or legal-entity disclosure. Because page-level analysis was incomplete, the on-page disclosure state is unclear rather than confirmed absent. The real-world operator has not been independently connected to any person or company, and ownership opacity applies. This is a verification limitation and is not by itself evidence of fraud. The operator cannot be assessed for regulatory standing, and no third-party broker or regulator record matched this domain. The risk assessment rests on the reputation findings above, not on this absence. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US, ARIN registry).
• Transport security: DV TLS certificate issued by YE1, valid to 2027-01-09, with about 79 days remaining. DV validation confirms control of the domain only and says nothing about the operator.
• Registration: registered through NICENIC International Group Co., Limited, with registrant details incomplete.
• DeFi recognition: the domain is not listed in the DeFi protocol directory, so no protocol or TVL standing supports the site.

What to Verify Next

Before any engagement, independently establish who operates the service. That means locating a named legal entity, a registered address and a verifiable team through channels not supplied by the site itself. Any claim of regulatory authorization should be checked directly with the relevant registry, not through badges or text on the pages. Confirm the official support and contact channels through an independent route. Check whether the project is referenced by established Solana ecosystem sources, and re-check the domain's reputation status. If the listings are later delisted, the posture should be reassessed as the domain accrues history. Evidence:

• Homepage: promotes a no-code Solana token creator, but the captured evidence names no operating entity.
• Registration: the domain is only days old, so no established record exists to cross-check.
• Reputation: active third-party detections mean the status should be re-verified at the time of any decision.

Summary Verdict

The site carries an elevated risk posture. External threat detections are decisive, and they outweigh the clean behavioral observations and the valid encryption. The short history and unverified operator give no counterweight. The evidence supports caution toward the site, not a conclusion about the operator's intent.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are edge nodes, so the origin server is not visible. Shared edge infrastructure and a valid certificate reduce exposure to some technical attacks. They do not establish legitimacy and cannot offset the external threat listings. Edge-only visibility also means the origin host cannot be independently verified, and content could change quickly without any visible infrastructure change.

Closing Assessment

Interaction should be limited to read-only viewing. Wallet connections, credential entry, account creation and any payment or token transfer should be avoided until the threat listings are cleared and the operator is independently verified.