Is launchtool.biz a scam? TrustSniffer's high-risk assessment: 8/100

Overview

Launchtool.biz is a single-page website titled "Solana Launch Tool | Token Creator & AMM Terminal". It presents itself as a self-service terminal for creating Solana tokens and interacting with automated market maker (AMM) liquidity. Its apparent purpose is to let visitors launch and trade tokens through a browser-based interface, which usually involves connecting a wallet or sending funds.

Scam/Impersonation Risk

This site carries elevated risk, driven by confirmed external contradictions. Threat-intelligence sources currently flag the domain as malicious, with one further source rating it suspicious, and the domain is blacklisted. The domain was registered only a few months ago. A newly registered domain that already has confirmed adverse listings fits the usual pattern of short-lived launch-and-extract operations. This is especially so in the token-creation niche, where a trustworthy-looking terminal can steer visitors into authorising transactions or depositing funds. No conflicting legal entities, brand impersonation, or phishing page were identified, but the blacklist findings are decisive for sensitive interactions. Automated browsing of the homepage showed heavy dependence on third-party services. Nearly all cross-origin traffic went to external destinations, and none of it was to unrecognised endpoints. The page also produced repeated front-end errors. These behaviours are not malicious in themselves, and no wallet-draining, clipboard-hijacking, hidden-form, or credential-exfiltration behaviour was observed. Evidence:

• Homepage and domain reputation: two threat-intelligence engines rated the domain malicious and one suspicious, and an external blacklist entry is confirmed.
• Domain provenance: registered 2026-06-04 (~0.4 years old) through Global Domain Group LLC.
• Homepage behaviour: three sandbox runs all returned HTTP 200, with 27 external XHR/fetch calls (97.6% of cross-origin traffic) and 9 external POST requests, none to non-whitelisted hosts.
• Homepage behaviour: 12 console errors were logged, with no wallet-drainer, clipboard-write, hidden-form, or external password-form activity.

Regulatory Verification Notes

The page content could not be independently interpreted at depth. The real-world operator therefore remains unidentified, and the site's claims should not be treated as proof of identity. No third-party regulatory registration or broker-database match exists for this domain, and none is asserted. A token-launch and AMM trading service can fall under virtual-asset or securities-style oversight depending on the user's jurisdiction. The absence of any verifiable licensing context therefore matters more here than it would for an ordinary content site. This is a verification gap, not evidence of wrongdoing on its own. It is secondary to the confirmed reputational findings. Evidence:

• Homepage: a short single-page presence (about 2,000 characters of text) positioned as a Solana token creator and AMM terminal.
• Transport encryption: the TLS certificate was issued by WE1 (DV, domain validation only) and is valid to 2026-12-29.
• Hosting: served from AS13335 (US).

What to Verify Next

Any contact with this site should wait until the adverse listings are resolved. If an organisation still needs to assess it, it should rely on independent, offline channels to establish who operates the service. It should also check whether the operator is registered with a financial or virtual-asset regulator in the relevant jurisdiction. Any wallet connection or token-creation flow should be examined only in an isolated environment with no funded wallet. A security team should also confirm the official support and contact channels through a source independent of this site. The blacklist status should be re-checked over time, since a clean result would change the picture. Evidence:

• Reputation findings: the domain's malicious and suspicious detections were present at analysis time and could change on re-scan.
• Homepage: the interface presents token creation and AMM trading, which are the flows where funds or wallet permissions are requested.
• Domain provenance: the registration is recent (June 2026), so no long operating history exists to offset the adverse listings.

Summary Verdict

The available evidence supports a high-risk posture. Confirmed blacklist findings on a very young domain with an unverified operator outweigh the technical hygiene the site shows. That hygiene includes a valid certificate, stable page delivery, and a mainstream network presence. These are baseline attributes that any site can acquire, and they do not establish legitimacy.

Infrastructure Integrity

The site is served entirely through Cloudflare's CDN and WAF from US network infrastructure. All four observed addresses are Cloudflare edge servers, and the origin server was not observable. Bot protection was detected during browsing. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true hosting and can mask rapid content changes behind a stable front, so it does not offset the reputational findings.

Closing Assessment

Treat this site as unsafe for login, credential entry, wallet connection, or any financial transaction. At most, limit interaction to passive, read-only viewing in an isolated environment, and do not download or sign anything originating from it.