Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
fauci-sol.xyz shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 9 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 24 reports; shared hosting inflates reports | Clear |
| Domain age | 3 months oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20261 snapshot | Clear |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a single-page promotional site for a Solana-based meme token branded "DR. DEATH" with the ticker $FAUCI. It uses a politically themed, sensational name and presents itself as a token project. Its apparent purpose is to attract visitors toward buying or trading the token, which points to a speculative token-promotion model.
Scam/Impersonation Risk
This is the dominant concern. Multiple independent security vendors currently classify the domain as malicious, and the combination amounts to a confirmed blacklist-level reputation hit. Separate detections in the external reputation data corroborate the primary flags. This is a hard contradiction and an elevated-risk condition for any sensitive interaction. No conflicting legal identities and no explicit brand impersonation were observed, so the risk comes from the external threat classification and not from identity inconsistency. The branding trades on a prominent public figure's surname and a topical "death" theme, a typical pattern for opportunistic meme-token launches that recycle notoriety to generate traffic. The page text carries no verifiable team, audit or project documentation. Behavioural testing found heavy third-party network activity, repeated front-end console errors, and traffic to destinations outside the standard allow-list, including an outbound data submission. That pattern is consistent with a thin, rapidly assembled front-end that relies on external services. Abuse reports exist against a shared edge address, but they belong to the infrastructure provider's common address space. They are discounted and are not attributed to this site. No wallet-connection or wallet-draining routines were triggered in the sandbox, and no content cloaking was detected. Those results do not offset the external reputation findings.
- Homepage: titled as a "$FAUCI on Solana" token promotion, with no verifiable team, audit or product documentation in the captured text.
- Reputation sources: several major security vendors flag the domain as malicious, and additional engines mark it suspicious.
- Domain provenance: registered 2026-07-30 (~0.24 years old), with a single web-archive snapshot dated 2026-08-06 (1 year tracked).
- Sandbox behaviour: 3 of 3 runs completed, with 40 external XHR requests, 7 external POSTs (1 to a non-allow-listed destination) and 10 console errors.
Regulatory Verification Notes
The site gives no indication of regulated status. Disclosure on the captured page is unclear, and it names no operating entity, jurisdiction, licence or registration. A token-promotion page that invites speculative purchases would ordinarily be expected to disclose such details. No third-party broker or regulatory record matched this domain. The gap is a verification matter and is not independent proof of wrongdoing. Here it compounds the confirmed reputation findings. Governance and ownership transparency are both weak. The domain is brand-new and the site offers no accountable counterparty to hold responsible. Registration was made through the registrar Global Domain Group LLC, which does not by itself corroborate the project.
- Homepage: no company name, licence, registration number or responsible party appears in the captured content.
- Registration record: created 2026-07-30 and set to expire 2027-07-30, through Global Domain Group LLC.
- Transport layer: served from AS13335 (Cloudflare, Inc., US). The TLS certificate is DV-level, issued by WE1 and valid to 2026-12-26.
- Third-party broker dataset: no matching entry.
What to Verify Next
Any prospective interaction should begin with independent confirmation of the token's actual origin. That means checking the token's contract address, supply and creator wallet in a public Solana block explorer, and not relying on addresses displayed on the site. The claimed team or sponsor should be confirmed through channels outside this domain, since nothing on the page substantiates them. Confirm the official support and contact channels through an independent route. Compare the domain against the project's other announced domains and social accounts, because meme-token launches are commonly cloned and typosquatted. Check the current status of the reputation flags with the flagging vendors before considering any change in posture.
- Homepage: no verifiable contract address, audit or team information is available in the captured content.
- Domain age: ~0.24 years, which allows no track record to be assessed.
- Archive history: only one snapshot exists, so there is no earlier version of the site to compare against.
Summary Verdict
The overall posture is high-risk and clearly cautionary. Convergent external threat detections drive the assessment and outweigh the site's technically valid encryption and its otherwise ordinary page behaviour. Legitimacy cannot be inferred, and the real-world operator is not independently identified. The site is suitable for passive, read-only viewing at most.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge nodes. The origin server was not observable, so the hosting location cannot be verified independently. This arrangement can also conceal rapid content changes. The protective layer reduces exposure to some infrastructure-level attacks and provides a valid encryption certificate, but it is a mitigating factor only. It does not offset the reputation risk or establish legitimacy. A heuristic flag for a young domain with sparse subdomains is present but unconfirmed, and it carries little weight against the confirmed findings.
Closing Assessment
Treat the site as unsafe for any sensitive activity. Do not connect a wallet, sign transactions, enter credentials or send funds. Anyone who has already interacted with it should revoke wallet permissions and monitor their accounts. Any further engagement should be limited to passive viewing from an isolated browser.
Written analysis generated 2026-10-27 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, behaviour in a sandbox, registration and ownership.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Behaviour in a sandbox
- Most of what the page loaded came from other domains rather than from this one.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_RATIO_HIGH
05 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Signals weighed against the site
- AbuseIPDB: 24 reports on hosting IP 2a06:98c1:3120::b (Cloudflare, Inc., Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of fauci-sol.xyz.
- The request stayed on fauci-sol.xyz. It was not redirected to another domain. Clear
- Registration is published under Global Domain Group LLC. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-07-30. Noted
- The earliest public archive of this site is from 2026-08-06. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Global Domain Group LLC |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2a06:98c1:3120::b |
| Name servers | BYRON.NS.CLOUDFLARE.COM, IRENA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2026-12-26 |
| Domain age | 0.24 years (continuous registration) |
| Domain expiry | 2027-07-30 |
| Archive first seen | 2026-08-06 |
| Archive snapshots | 1 |
| Reputation | VirusTotal: 9 flagged | AbuseIPDB: 0% confidence, 24 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about fauci-sol.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.