Is dexlab-dex.net a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

DexLab-dex.net is a newly launched website that markets a Solana-based decentralised-exchange application under the title "DexLab App — Swap, Pool & Stake on Solana" and the claim "#1 Solana Swap Platform". The homepage presents token swapping, liquidity pooling and staking, which points to a crypto-trading and yield-product business model aimed at users who would connect wallets and commit digital assets.

Scam/Impersonation Risk

This site shows hard, converging contradictions. It is blacklisted by external threat intelligence. A large cluster of security engines flags the domain as malicious, and three major security vendors are among them. This tripped an automatic safeguard that caps the site's trust at the lowest level. Earlier phishing associations also apply to the domain, and the combined pattern is consistent with a phishing or impersonation-style operation. The domain was registered only about three months ago, and nothing on record connects it to an established brand or to the real-world operator. That timing matches the usual pattern for disposable crypto front-ends. The homepage headline "#1 Solana Swap Platform" is an unverifiable superlative. It trades on the name of a better-known decentralised-exchange brand and gives no evidence for the ranking. A swap, pool and stake interface is also the standard format for wallet-draining scams. Any transaction approval made on a lookalike front-end could expose a user's tokens. The automated browser sessions did not observe wallet-drainer behaviour, clipboard tampering, hidden forms or credential posts to outside parties. That is a limited positive, and it does not offset the external detections. Evidence:

• Homepage: the title and headline advertise swap, pool and stake functions on Solana and the unsupported "#1 Solana Swap Platform" claim.
• Domain registration: the domain was registered on 2026-07-30 (~0.24 years old), which puts it well inside the typical lifespan of throwaway scam domains.
• Reputation: 20 engines rate the domain malicious and 3 more rate it suspicious, which triggered the safeguard that caps trust.
• Protocol recognition: the domain is not listed in a DeFi protocol-tracking index, so there is no recognised protocol, TVL or market footprint behind the "#1" claim.
• Behaviour: three successful automated sessions saw no external network calls, no clipboard writes and no wallet-drainer activity.

Regulatory Verification Notes

The evidence contains no licence, registration or supervisory status for the operator, and no third-party broker or regulator record matches the brand. The homepage does not give a clear on-page disclosure of the legal entity behind a platform that offers financial-style products. Because the site's real-world operator has not been independently confirmed, any on-site claims about identity, security or ranking cannot be treated as established. The site does use standard transport encryption, but a domain-validated certificate only proves control of the domain. It says nothing about who runs the service or whether it is authorised. Evidence:

• Registration: the registrar is Atak Domain, with a one-year term running from 2026-07-30 to 2027-07-30.
• Transport security: the TLS certificate was issued by YR1 (DV level) and is valid to 2027-01-19.
• Hosting: the site is served from AS59692 (IQWeb FZ-LLC, UAE).
• Homepage: it names no legal entity, licence or regulator for its swap, pool and stake offerings.

What to Verify Next

Before any engagement, confirm the official DexLab web address and the supported application through an independent route. Suitable routes are the project's verified social channels, documentation or a recognised protocol directory. Do not rely on links found on this site. Check whether the Solana programs and token addresses used by this front-end match the ones published by the genuine project. Confirm the legitimate project's official support and contact channels through a separate offline or authenticated route. Check any claimed licensing or registration with the relevant registry directly. Re-test the domain only after the malicious listings have been formally withdrawn. Evidence:

• Homepage: the swap, pool and stake interface offers an on-chain asset path that should be matched against the genuine project's published addresses.
• Reputation: the current malicious classification should be checked again at a later date.
• Registration: the domain's three-month history gives no prior track record to rely on.

Summary Verdict

This website sits in the highest-risk tier. The external threat detections and the earlier phishing associations are decisive, and the site's newness and lack of confirmed identity add to the concern. The evidence does not support treating it as a legitimate service for sensitive or financial interactions.

Infrastructure Integrity

The site resolves to a single address at a UAE-based hosting provider, IQWeb FZ-LLC (AS59692). That address sits in a registry region different from the hosting country. There is no CDN or WAF in front of it, so there is no protective layer to mitigate exposure. The same address has drawn six abuse reports in the recent past, including for categories relevant to web abuse. Because the address is shared hosting infrastructure, those reports may partly reflect other tenants. The sparse subdomain footprint fits a freshly deployed site. The infrastructure therefore does not offset the reputation concerns.

Closing Assessment

Do not connect a wallet, sign transactions, create an account, enter credentials or move funds through this website. At most, treat it as non-interactive content, and reach the genuine DexLab project only through addresses confirmed independently.

Signals weighed against the site

• AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.