Is tester2.asia a scam? TrustSniffer's high-risk assessment: 0/100

Overview

Tekomi is a single-page crypto web application, delivered under a domain that does not carry the Tekomi name. It presents a token swap interface (ETH to BTC), limit orders, buy/sell flows, and market listings for assets such as NEAR, ZEC, HYPE, WLD, PEPE, SUI, PUMP, INJ, PENGU, AERO, VVV, CARDS and TCY. Its navigation also promotes "Earn", "Yields", "Lending" and "Pools" sections and a "High Yield Tokens" listing. Every transaction path begins with a "Connect Wallet" prompt. The apparent business model is to earn from swap and buy/sell flow and to invite users to deposit crypto assets into yield, lending and liquidity-pool products.

Scam/Impersonation Risk

The assessment is clearly cautionary. The domain is blacklisted by external threat-intelligence sources. In the reputation checks, one engine rated the domain malicious and another rated it suspicious. This is the confirmed contradiction that drives the elevated-risk posture. No brand impersonation of a known third party was detected, and no conflicting legal-entity names appear, because the site names no legal entity at all. The homepage does show a brand-to-domain mismatch. The page is branded Tekomi, but its anonymized click-tracking notice tells visitors that by using the scanned domain they accept tracking. That domain is unrelated to the brand, which suggests a staging-style or repurposed deployment rather than a properly branded production service. The commercial proposition is the main exposure. The site invites deposits into Earn/Yields, Lending and Pools and advertises a "High Yield Tokens" listing. It gives no yield source, fee structure, audit or risk warning to back those claims, and the claims cannot be tested against anything on the page. Deposit-before-service mechanics combined with opaque value flow are a recognised pattern in yield-themed fraud. The sandbox behaviour reinforces the concern. Heavy outbound traffic went to third-party destinations outside the site's expected infrastructure, including outbound data submissions to destinations not on the known-good list, alongside repeated script errors. Evidence:

• Homepage: wallet-connect prompt, swap panel with an empty receive-address field, and "Earn", "Yields", "Pools", "Lending" and "High Yield Tokens" sections, with no stated yield source, fee schedule or risk terms.
• Homepage: the tracking notice names a different domain from the Tekomi brand shown in the page title.
• Registered 30 May 2026 (~0.39 years, ~143 days old), which makes this a very young domain for a service seeking asset deposits.
• Browser behaviour across 3 runs: 78 external XHR requests (24 to non-whitelisted destinations), 30 external POSTs (6 to non-whitelisted destinations), and 14 console errors.

Regulatory Verification Notes

The homepage contains no operator name, legal entity, registration number, licence or regulator reference. No dedicated legal, terms or about page was captured. For a service that accepts crypto deposits and promotes lending and yield products, this is a significant disclosure gap. On its own it would be a verification matter. Here it compounds the confirmed blacklisting, so no regulatory standing can be assumed. No broker-reputation dataset matched the site, so no third-party regulatory or reputational context exists to offset the gap. The operator's real-world identity is unverified, and nothing on the site allows a visitor to link the Tekomi brand to an accountable person or company. Evidence:

• Homepage: no legal entity, licence, regulator or jurisdiction statement appears anywhere in the captured content.
• Domain registered through Global Domain Group LLC, with registrant details redacted behind Global Domain Group Privacy Service; expiry 30 May 2027.
• Served from AS13335 (Cloudflare, Inc., US); TLS certificate issued by YE2 (DV, domain-validated only), valid to 2026-12-24 with 64 days remaining.

What to Verify Next

Independent confirmation should come from outside the site. Start with the Tekomi brand's official channels, such as a documented website, verified social accounts or published documentation, and check whether any of them recognise this domain as theirs. Next, search the financial-services and crypto-asset registries of the relevant jurisdictions for any licence or registration held by an operator under that name. Any smart-contract or pool addresses behind the yield products should be identified independently and examined on a public blockchain explorer for ownership, audit history and withdrawal behaviour. None of this should be done by connecting a wallet to the site. Counterparties should also confirm official support and contact channels through an independent route before any engagement. Evidence:

• Homepage: the yield, lending and pool offerings cite no audit report, smart-contract address or third-party attestation that can be traced.
• Homepage: no operator name or registry reference is given, so registry searches must start from the brand name and cannot be anchored to the domain.
• Homepage: the wallet-connect step is the only route to the swap and earn functions, so none of them can be tested without exposing a wallet.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, a brand-to-domain mismatch, a very recently created domain, and deposit-oriented yield products with no verifiable backing converge on a coherent negative picture. Valid encryption and reputable network infrastructure do not offset this picture. The site's real-world operator remains unverified, and the available evidence does not support treating it as a trustworthy venue for financial activity.

Infrastructure Integrity

The site sits entirely behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and no origin server address was observable. This is a mitigating factor, as the edge layer provides DDoS and transport protection and its abuse history is clean. It does not demonstrate legitimacy. Edge-only visibility prevents independent verification of where the application is actually hosted and can mask rapid content swaps behind a stable front end. The infrastructure therefore cannot offset the reputational risk that determines the verdict.

Closing Assessment

The site should not be used for any login, wallet connection, token swap or deposit, and no assets should be sent to any address it displays. If it has already been visited, wallet approvals granted to it should be reviewed and revoked as a precaution. Any browsing should be strictly read-only, and organisations should block or monitor the domain until independent evidence of a legitimate, accountable operator exists.