Is metadao-dex.net a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as "MetaDAO DEX", a decentralized-exchange front end on the Solana ecosystem. Its homepage offers token swaps, cross-chain bridging, liquidity pools and staking under the headline claim of being the "#1 exchange protocol on Solana". Its apparent purpose is to draw visitors into transacting digital assets through the interface. The site is a text-heavy single-brand landing experience, and nothing observed ties it to a verified real-world operator.

Scam/Impersonation Risk

The assessment is clearly cautionary, because hard contradictory signals are present. Multiple independent security engines, including several top-tier vendors, currently classify the domain as malicious or suspicious. This confirmed blacklisting is decisive on its own and overrides every mitigating technical signal below. The domain pairs a protocol-style brand name with the generic term "dex" and appeared only very recently. Together with the homepage's unverifiable "#1" superlative, this is the typical profile of a look-alike front end built around a recognizable crypto brand. Impersonation of a specific legitimate project is not independently confirmed, and no conflicting legal entities were observed. For a site whose core function is asking users to swap, bridge, pool and stake assets, the practical danger is wallet-linked loss of funds. The automated behavioral sandbox did observe benign conduct: no third-party data exfiltration, no wallet-drainer behavior, no clipboard manipulation and no cloaking. That conduct is mitigating only and does not offset the threat classification. Evidence:

• Homepage: the title promotes "Swap, Bridge, Pool & Stake" and a "#1 Exchange Protocol on Solana" claim with no supporting verification.
• Domain registered 2026-07-30 (~0.24 years, about 86 days old), through the registrar Atak Domain.
• Security-engine consensus: 14 malicious and 3 suspicious verdicts, including three tier-one vendors. The consensus is strong enough to trigger the automated block threshold.
• Sandbox of the homepage (3 of 3 runs successful): no external requests, no wallet provider detected, no hidden forms and no cloaking.

Regulatory Verification Notes

The site's legal and identity disclosures could not be independently confirmed, and the operator's real-world identity remains unverified. No regulator or licensing registry confirms any financial-services authorization for the platform. No broker-reputation database matched it either. A platform inviting asset swaps and staking would ordinarily be expected to name an accountable entity and its jurisdiction. Here the registrant details are only generic administrative placeholders. This is a verification gap and is not itself evidence of fraud, but it removes any institutional accountability a user could rely on if funds were lost. Technical hygiene such as valid transport encryption does not substitute for regulatory standing. Evidence:

• Registrant record shows only the generic label "Domain Administrator", with no named company or individual.
• Served from AS59692 (IQWEB - IQWeb FZ-LLC, AE).
• TLS certificate issued by YR2 (DV, domain validation only), valid to 2027-01-19. DV confirms control of the domain, not the identity of the operator.

What to Verify Next

Any interaction should wait until the domain has been checked against the official channels of the genuine MetaDAO project. Those channels are the project's documentation, verified social accounts and community announcements, reached independently and not through links on this site. Wallet connections and token approvals must be avoided on this domain. Any wallet that has already interacted with it should have its approvals reviewed and revoked. Finally, a named legal entity and a regulatory authorization should be confirmed with the relevant registry before any engagement. Evidence:

• Homepage: the site's own claims of leading status provide no checkable reference.
• Threat classification: the domain is already flagged by multiple engines, so independent confirmation of authenticity is a prerequisite.
• Domain registration is days to weeks old relative to the claims of market leadership, which is inconsistent with an established protocol front end.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections combine with a very new domain and an unverified operator identity to produce a clearly cautionary conclusion. Benign sandbox behavior and valid encryption do not change that classification.

Infrastructure Integrity

The site is hosted by IQWeb FZ-LLC in the United Arab Emirates on a single address, and it is not fronted by any CDN or WAF. Hosting is directly exposed, so no protective layer mitigates the reputation risk. Abuse reports exist against that address, but they apply to shared provider infrastructure and are not attributed specifically to this site. Domain-footprint heuristics show a young domain with few subdomains. These are unconfirmed indicators and secondary to the confirmed external detections.

Closing Assessment

The site should not be used for login, wallet connection, token approvals or any financial transaction. At most, it may be viewed in a read-only manner. Anyone who has already interacted with it should treat the wallet as potentially exposed.

Signals weighed against the site

• AbuseIPDB: 6 reports on hosting IP 186.2.175.35 (IQWeb FZ-LLC, Data Center/Web Hosting/Transit), 11% confidence. The reports are attributed to shared infrastructure, not specifically to this website.