Is vaultlens.wiki a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

BlastLine presents itself as a single web console that bundles SMS messaging, voice calls and HLR (mobile-number lookup) services, and it is served from a recently created domain whose name, vaultlens.wiki, does not match that brand. The homepage appears to offer bulk-messaging and telephony tooling to business or technical customers. The apparent business model is a paid communications and number-intelligence platform.

Scam/Impersonation Risk

Contradictory signals are present and carry decisive weight. The domain is currently blacklisted by multiple independent reputation sources. Several security engines flag it as malicious or suspicious, including at least one top-tier network-security vendor, and these detections are active now. No phishing page, brand impersonation or conflicting legal entities were confirmed on the pages reviewed. The blacklisting alone is sufficient to classify the site as high risk. The domain was registered only weeks before the assessment, and its web-archive history is a single capture. Nothing in its history shows continuity or an established reputation. The homepage brand ("BlastLine") differs from the domain name, which is an unexplained branding mismatch and not a confirmed impersonation. The nature of the offering adds to the concern. SMS blasting and HLR lookup services are commonly misused for spam, smishing and number harvesting, so a new, blacklisted domain in this category warrants particular scepticism. Behavioural testing in a sandbox found no wallet-draining, clipboard hijacking, hidden forms, cloaking or credential posts to external hosts. Several background requests to third-party endpoints were observed, and none of these observations offsets the blacklisting. Evidence:

• Homepage: the page title presents the "BlastLine" console for SMS, calls and HLR, while the serving domain is vaultlens.wiki.
• Domain provenance: registered 2026-08-07 (~0.22 years, about 11 weeks old), with registration running to 2027-08-07.
• Web archive: 1 snapshot, first and last seen 2026-08-10, covering 1 year tracked, so no meaningful history.
• Behavioural sandbox on the homepage: 3 of 3 runs succeeded, with 6 external POST/XHR requests, none to non-whitelisted hosts, and no hidden or external password forms.

Regulatory Verification Notes

The assessment found no verified licensing, regulatory registration or corporate-registration information that could be tied to the operator. Disclosure of the legal operator on the pages reviewed remains unclear. Communications and number-lookup services typically carry telecom, data-protection and anti-spam compliance obligations, and none of these are evidenced. The site is not matched in any third-party broker-reputation dataset, so no external reputational context exists on this front. The licensing gap is a verification matter and is secondary to the blacklisting. The site's transport encryption is valid, but it is a basic domain-validated certificate. That confirms an encrypted connection and says nothing about the operator's legitimacy. Evidence:

• Hosting and network: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV), valid to 2027-01-03.
• Registration: domain registered through Fewmoretaps OU d/b/a Trustname.com.
• Homepage and legal pages: no licence, regulator or company registration number was identified.

What to Verify Next

Prospective counterparties should treat the site as unvetted until an independent party has established who operates it. They should ask for the full legal entity name, registered address and telecom or messaging authorisations. They should check those details against the relevant company and telecom-regulator registries, not against anything the site states. The link between the BlastLine brand and this domain should be confirmed through a channel that is independent of the site, such as a known corporate contact or a verified listing. Any official support or contact channels should likewise be confirmed offline. If the site is already in use, the security team should review mail, DNS and web-filtering logs for traffic to the domain, and should ask the blacklisting sources how to request a review of the listing. Evidence:

• Homepage and legal pages: no verifiable operator name or licence was found, so registry checks have no site-supplied reference to start from.
• Reputation: several independent sources currently list the domain, so a delisting or clarification from them would be a meaningful positive indicator.
• Brand and domain: the "BlastLine" product name and the vaultlens.wiki domain are not reconciled anywhere on the pages reviewed.

Summary Verdict

The site is assessed as critical risk. Active blacklisting by independent reputation sources is the decisive factor. A very young domain with no established history, and a category of service that is attractive to abusers, reinforce that conclusion. The evidence supports a clearly cautionary stance toward any sensitive interaction with this site.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address belongs to Cloudflare edge servers. The real hosting location is therefore not visible, so the hosting cannot be verified independently. Cloudflare's protection is a modest mitigating factor. It does not offset the reputation findings, and it can also mask rapid content changes behind the same edge addresses. A heuristic flag of a young domain with sparse subdomains is consistent with the other findings but is unconfirmed on its own.

Closing Assessment

At most, the site should be viewed read-only from an isolated environment. No one should log in, enter credentials, make payments, share personal or customer data, or send messaging traffic through it unless the operator is independently verified and the blacklist listings are cleared. Organisations should consider blocking the domain at the web and email gateways in the meantime.