Is doom-sol.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a token-launch platform on the Solana blockchain. Its homepage is titled "Ember · Launch on Solana, paired with any stock", which suggests a service for creating crypto tokens linked to equities. The domain name uses a different brand, "doom-sol", so the visible product name does not match the address. The apparent business model is a speculative token-issuance and trading venue aimed at retail crypto users.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive element of this assessment. Multiple independent security engines currently flag the domain as malicious, including three tier-one security vendors. The domain is on a confirmed blacklist, and the severity of these detections triggered an automatic cap on trust. No brand impersonation or conflicting legal identities were identified, but the blacklist hit alone is enough to make this a high-risk posture. The homepage pairs a Solana token launch with "any stock", a mechanic that invites users to connect wallets and commit funds. The site publishes no evidence that the equity pairing is backed by any real asset, custody arrangement, or issuer. The domain is only a few months old and has almost no archive footprint. That is the profile typical of short-lived campaigns, and the blacklist status makes it more concerning. Behavioral testing found no wallet-drainer routines, clipboard tampering, hidden forms, or cloaking. This is a mitigating observation, not an exoneration, because the page changed heavily after interaction and generated many console errors. Together with the heavy volume of third-party requests, this points to an unstable, script-driven front end. Evidence:

• Homepage: titled "Ember · Launch on Solana, paired with any stock", under a domain named "doom-sol", so the product name and address do not match.
• Reputation: 12 security engines flagged the domain as malicious and 2 as suspicious, with an external blacklist hit confirmed.
• Domain provenance: registered August 2026 (~0.21 years old). The web archive holds only 3 snapshots, spanning 2026-09-19 to 2026-10-12 (1 year tracked).
• Homepage behavior (3 test runs): 51 external data requests and 6 external form posts, none to non-whitelisted destinations. No wallet-drainer or clipboard activity was detected. The page showed 15 console errors and a very large content rewrite after interaction (6,486 DOM changes).

Regulatory Verification Notes

The pages reviewed contain no clear legal-entity disclosure, licensing statement, or registration number. A site offering equity-linked token products would be expected to state its regulatory position. Ownership of the domain is opaque and no operator could be tied to the site. This gap is a transparency matter and is not by itself evidence of fraud, but here it compounds the confirmed reputational contradictions. No third-party broker or regulatory-database match was found for the site, so no external reputational signal supports any claim of authorization. The site does use a valid, mainstream TLS certificate. That confirms encrypted transport only and says nothing about the operator's legitimacy. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-01.
• Registration: the registrar is Global Domain Group LLC, and the domain expires in August 2027. Registration was one year.
• Homepage: no operator name, license, or regulator reference was observed in the captured content.

What to Verify Next

Any dealings should be suspended until the blacklist status is resolved or explained. If a prospective user still wishes to engage, the claimed operator should be identified through an independent route, such as an official announcement from a known, established project. The claim that tokens are "paired with" stocks should be checked against the registry of the relevant securities regulator. Evidence should be sought that a licensed custodian or issuer actually backs any equity link. The official support and contact channels should be confirmed independently, and the on-chain addresses and token contracts the site references should be checked in a public blockchain explorer before any wallet interaction. Evidence:

• Homepage: the equity-pairing claim has no visible supporting issuer or custodian documentation.
• Reputation: security-engine detections remain active as of this assessment, so any later delisting should be confirmed directly with those vendors.
• Domain history: the very short operating history means no track record exists to support an operator's claims.

Summary Verdict

The overall posture is a high-risk, clearly cautionary assessment. Confirmed threat detections from several independent sources override the otherwise functional technical hygiene of the site. The real-world operator identity remains unverified, so no claim of legitimacy can be supported on the available evidence.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge server. The origin server is not visible, so hosting cannot be independently verified, and rapid content changes behind the edge could go unnoticed. This protective infrastructure is a mitigating factor only. It cannot offset the reputation risk, and it is available to any operator, legitimate or not. The domain is young and has sparse subdomains, an unconfirmed heuristic pattern that is consistent with a recently stood-up site.

Closing Assessment

The site should be treated as read-only at most. Wallet connections, credential entry, and any deposit or purchase should be avoided entirely until the threat listings are cleared and the operator is independently identified.