Is rollsols.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

SolPay is a single-page website on the rollsols.live domain. It presents itself to visitors under the title "SolPay", and the name suggests a payment or crypto-payment service tied to the Solana ecosystem. The captured homepage carries only a short block of text and offers no extended product documentation, legal pages, or corporate narrative. Its apparent purpose is therefore a payment-themed or crypto-themed front end whose business model cannot be established from the site itself.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Multiple independent threat-detection engines currently flag the domain as malicious or suspicious, including at least one major network-security vendor, and the site appears on external blacklists. The domain is also newly registered, a pattern commonly seen in short-lived fraud and phishing infrastructure. A payment-branded name on a freshly registered domain with active blacklist hits is a profile that warrants treating the site as hostile until proven otherwise. No conflicting legal entities and no specific brand impersonation were observed on the captured page, but the reputational evidence alone outweighs the absence of those signals. The sandboxed behavioral runs showed no outbound data submission, wallet-drainer behavior, clipboard manipulation, or hidden forms. This is a limited mitigating observation, because a page can be benign during testing and altered later. The assessment does not rest on the thin homepage content. It rests on the external detections and the domain's age. Evidence:

• The domain was registered in August 2026 (about 57 days, roughly 0.16 years old), through the registrar Global Domain Group LLC.
• Multiple independent detection engines classify the domain as malicious or suspicious, and it appears on external blacklists.
• The homepage, titled "SolPay", exposes only a brief block of text and no substantive product or company information.
• Behavioral testing across three runs recorded no external data posts, no wallet-connection abuse, and no cloaking.

Regulatory Verification Notes

The site discloses no legal entity name, licence, registration number, or operator identity on the captured page. The real-world operator therefore remains unconnected to any verifiable business or person. The domain's registration record is also incomplete about the registrant. For a site presenting a payment-style brand, the absence of any regulatory or corporate disclosure is a material gap. The gap is not the basis of the cautionary rating. That rating rests on the contradictory reputation evidence described above. No third-party broker or regulatory-database match exists for this brand, so no external regulatory standing can be attributed to it. Evidence:

• The homepage lists no company name, licence, or registration details.
• Served from AS13335 (Cloudflare, Inc.), US.
• TLS certificate issued by WE1 (DV, domain validation only), valid to 2026-11-27. DV validation confirms control of the domain, not the identity of the operator.
• Registration runs through to August 2027, with the registrant details incomplete.

What to Verify Next

Any interaction should be preceded by independent confirmation that the SolPay brand belongs to a real, regulated payment or crypto provider. Possible steps are checking the relevant financial or virtual-asset service-provider registry for the named operator, and tracing the brand to its official channels through an independent route rather than through links found on this site. The official support and contact channels should be confirmed the same way. Anyone who reached the site through an unsolicited message, advertisement, or social-media link should treat that referral as a possible phishing delivery route. Any wallet or account that has already interacted with the site should be reviewed for unexpected approvals or transactions. Evidence:

• The homepage presents no verifiable operator or registry reference to check against.
• The domain's recent registration means no long-standing public record of the brand exists under this address.
• The external detections apply to the domain itself, so a referral from any source does not make the destination safe.

Summary Verdict

The site carries a clearly elevated, high-risk posture. Confirmed blacklist exposure and multiple malicious detections, combined with a very young domain and no verifiable operator, outweigh the few clean technical attributes. A valid certificate and benign sandbox behavior do not offset the reputation risk. Available evidence does not support treating the site as legitimate.

Infrastructure Integrity

The site is fronted by Cloudflare, a mainstream CDN and WAF provider. All observed addresses are CDN edge addresses, and the origin server was not observable. The protective layer mitigates exposure to common network attacks. It does not vouch for the operator, and it can obscure the real hosting location and allow content to change quickly behind a stable edge. The infrastructure therefore cannot offset the external threat detections.

Closing Assessment

The site should be treated as read-only at most. Login, credential entry, wallet connection, and any financial transaction are unsafe until the external detections are cleared and the operator is independently verified.