Is swap-vanarchain.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page portal titled "VANRY Swap Portal · Vanar". It presents itself as a token-swap interface for the VANRY asset in the Vanar blockchain ecosystem. The domain name pairs the project name with the word "swap". Its apparent purpose is to draw visitors into exchanging or converting tokens through a web front end that is presented as connected to that project.

Scam/Impersonation Risk

The most serious finding is that multiple independent security engines currently flag this domain as malicious or suspicious, including a major network-security vendor, and that the domain is on a confirmed external blacklist. This is a hard contradiction, and the assessment is accordingly high-risk. The domain was registered only a few months ago. Its name borrows the identity of an established blockchain project and adds the generic term "swap", a construction commonly used for lookalike token-swap lures that capture wallet approvals or funds. The evidence does not show conflicting legal identities, and no brand impersonation was independently confirmed. The risk rests on the blacklist and reputation detections, together with a very young domain and sparse subdomain structure that fit a short-lived, disposable deployment. Automated interaction with the homepage produced no outbound data transfers, no wallet-connection attempts, no hidden forms and no clipboard manipulation. That is a mitigating observation, but it does not offset the external detections. A page that behaves quietly under automated testing can change once a real wallet or a specific visitor profile is involved. Evidence:

• Homepage and domain level: several security engines flag the site as malicious or suspicious, and it appears on a confirmed external blacklist.
• Domain registration: registered 2026-08-09 (~0.21 years old, about 78 days), which is very young for a site presenting itself as a swap portal for an established token.
• Homepage behaviour: three sandbox visits all returned a stable page with no external requests, no wallet-connect activity and no console errors.
• Domain name: a project name combined with "swap" is consistent with a lookalike pattern, though no conflicting legal identity appears on any page.

Regulatory Verification Notes

The site is a single-page portal, and no legal, terms, about or licensing pages were available. The page therefore discloses no operating company, jurisdiction, registration number or financial-services authorization. This is a content gap, not a scam finding by itself. It matters more here because a swap portal handles user assets, which normally calls for a clearly identifiable operator. Ownership details are incomplete at the registration level, which is ownership opacity, not an identity contradiction. No third-party broker or regulator listing matched this domain, and no regulatory status can be inferred. A valid TLS certificate is present, but it is domain-validated only. It encrypts the connection and does not establish who operates the site. Evidence:

• Registration: registrar NICENIC INTERNATIONAL GROUP CO., LIMITED; created 2026-08-09, expiring 2027-08-09.
• Transport security: TLS certificate issued by WE1 (DV), valid to 2027-01-07, with about 72 days remaining at assessment.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage: it shows no operator name, licence or registration reference.

What to Verify Next

Before any engagement, confirm through the Vanar project's own official channels, reached independently of this domain, whether it operates or endorses any swap portal at this address. The project's officially published swap or bridge links should be compared against this domain. Any claim that the portal is official should be treated as unconfirmed until the project confirms it. A published operator name and any required authorization should be checked in the relevant registry. The site's contact channels should also be validated through an offline route. Wallet-permission tooling can be used to confirm that no approvals have been granted to contracts associated with this site. Evidence:

• Domain registration: created 2026-08-09, so any claimed association with a long-running project has no history on this domain to support it.
• Homepage: presents itself as a "VANRY Swap Portal · Vanar", a claim that only the project itself can confirm or deny.
• Threat intelligence: the detections against this domain are current, so project confirmation should precede any interaction.

Summary Verdict

The overall posture is high-risk. Current external threat detections and a confirmed blacklist listing, combined with a very recently created domain and unverified operator identity, outweigh the site's technically orderly behaviour. The available evidence does not support treating this site as a legitimate or official swap service.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and all observed addresses belong to edge servers, so the origin server was not observable. The transport encryption is valid and from a recognised issuer. These are mitigating factors only. Edge-only visibility prevents independent verification of the real hosting and makes rapid content swaps harder to detect. Protective infrastructure does not offset the external threat detections.

Closing Assessment

Do not connect a wallet, approve token permissions, sign transactions, enter credentials or send funds through this site. At most, treat it as a read-only page until the Vanar project confirms its status through its own official channels. Anyone who has already interacted with it should review and revoke wallet approvals and move assets to a fresh wallet if there is any doubt.