Is apps-solana.web.app a scam? TrustSniffer's high-risk assessment: 10/100

Overview

The website apps-solana.web.app is a single-entry web page titled "The Capital Market For Every Asset on Earth". It presents itself as a financial or digital-asset marketplace, and its hostname uses the name of the Solana blockchain ecosystem. It runs on a subdomain of a shared application-hosting domain rather than a standalone registered domain. Its apparent purpose is to draw visitors into an asset-trading or application-access experience. The page's own wording offers no independent basis for tying it to a named company or an official ecosystem project.

Scam/Impersonation Risk

This site carries an elevated, clearly cautionary risk profile because independent reputation sources convict it, not because of anything the page says about itself. Several security engines classify the site as malicious, and a further engine rates it suspicious. The domain is therefore blacklisted by external threat-intelligence sources, a confirmed contradiction that infrastructure quality cannot offset. The hostname borrows a prominent blockchain brand term ("solana") on a generic hosting subdomain, and the headline claim to be "the capital market for every asset on earth" is an unverifiable superlative. Together these match a common pattern of crypto-themed lookalike or lure sites, although no specific brand impersonation or identity conflict was confirmed. Four abuse reports exist for an address on the shared edge network serving the site. They apply to infrastructure used by many tenants and are not proof of this site's conduct, so they are treated as a minor supporting signal. In the sandbox, no wallet-connection prompts, clipboard tampering, cloaking, hidden forms, or fingerprinting were observed. The homepage did show unusually heavy dynamic rewriting of its page structure after interaction, a large volume of script errors, and several external-posting forms. Such behavior can mask rapid content swaps and warrants caution. Evidence:

• Homepage: external reputation sources return 3 malicious and 1 suspicious detections, and the domain is on an external blacklist.
• Homepage sandbox: about 5,146 page-structure mutations after interaction, 18 console errors, and 9 externally posting forms across 3 successful runs.
• Homepage: the title claims "The Capital Market For Every Asset on Earth", and the hostname uses the Solana name without any visible link to an official project.
• Hosting infrastructure: 4 abuse reports against a shared edge address (low confidence, shared-infrastructure attribution).

Regulatory Verification Notes

The homepage gives no verifiable legal entity, licensing status, registration number, or named operator. The real-world operator therefore cannot be tied to any recognized business or regulated financial provider. For a site offering a "capital market", this missing disclosure is a material gap. The site's own claims cannot supply the missing legitimacy evidence, and it was not identified as a regulated entity. No third-party broker or regulatory-database record matched the site, so no reputational or licensing signal from that route exists in either direction. A valid certificate and a recognized issuer confirm only encrypted transport. They say nothing about who operates the site or whether it is lawful. Evidence:

• Homepage: no company name, licence, or registration details were found in the page content.
• Transport encryption: TLS certificate issued by WR4 (DV, domain validation only), valid to 2026-12-22.
• Hosting: served from AS54113 (Fastly, US).
• No match in the broker-reputation dataset.

What to Verify Next

Do not rely on this site's own claims to establish legitimacy. Check the Solana ecosystem's official channels, its documented application directory, and the relevant project's announced domain, using addresses obtained independently and not through links from this site. Ask any claimed operator for its legal entity name and licensing details, and confirm them directly with the relevant financial regulator's public register before any engagement. Treat any wallet-connection or signature request from this site as untrusted until its provenance is confirmed. Evidence:

• Homepage: the hostname alone is the only claimed tie to the Solana ecosystem.
• Homepage: the title offers a broad market claim without naming a legal operator.
• Sandbox: no wallet-connection flows were triggered, so the transaction logic has not been observed.

Summary Verdict

The overall posture is high-risk. Strong external threat detections, an unattributable operator, and unstable page behavior converge on a site that should not be treated as trustworthy for sensitive or financial use. Standard transport encryption does not alter that conclusion.

Infrastructure Integrity

The site is served through the Fastly content-delivery and security network, and all observed addresses are CDN edge servers. The true origin host could not be observed. This protective layer is a mitigating factor only. It provides reliable delivery and some resilience, but it limits independent hosting verification and can conceal rapid content swaps. It does not offset the external threat detections.

Closing Assessment

Interaction should be limited to passive viewing at most. No wallet connection, signature approval, credential entry, or fund transfer is appropriate unless an independent, authoritative source confirms the operator and the service.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2620:0:890::100 (Google LLC, Content Delivery Network), 3% confidence. The reports are attributed to shared infrastructure, not specifically to this website.