Is sol.band a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

sol.band is a web property whose homepage, when visited by automated analysis, returned a protective security challenge page instead of ordinary site content. That page was titled as a suspected-phishing warning, so the site's own offering, branding, and business model could not be observed. It presents no verifiable product or service to a visitor, and its apparent purpose cannot be established from the captured material.

Scam/Impersonation Risk

This is a high-risk domain with confirmed contradictory signals. Several independent security engines currently flag the domain as malicious, and others mark it as suspicious. This includes at least one tier-one security vendor, and the combined detections amount to a confirmed blacklisting. The security interstitial served on the homepage was itself labelled as a suspected-phishing warning. That is a corroborating signal about how the domain is perceived by the protection layer in front of it, not content authored by the site. No brand impersonation or conflicting legal identities were observed. The case therefore rests on reputation-based evidence and not on a demonstrated spoof of a named organisation. Behavioural testing found no wallet-connection prompts, clipboard manipulation, hidden forms, or externally posting password fields. Page activity was nonetheless noisy. There were dozens of third-party background requests and external form submissions, repeated script errors, and very large page changes after interaction. None of those requests went to non-whitelisted destinations. These patterns do not reduce the weight of the blacklisting. Because the real page was gated, the absence of drainer-style behaviour cannot be read as clearance. Evidence:

• Homepage: the capture was blocked with an access-denied response (HTTP 403) and a security interstitial titled "Suspected Phishing".
• External reputation: 3 engines rated the domain malicious and 2 suspicious, including a tier-one vendor, with 55 rated harmless and 33 not detecting it.
• Behavioural sandbox (3 of 3 runs completed): 69 external background requests, 9 external POSTs, 28 console errors, and up to 1,518 page mutations after interaction.
• Domain provenance: WHOIS shows the current registration created on 2026-08-13 (~0.2 years), while web-archive records show 5 snapshots spanning 2023–2025 (3 years tracked). The domain is therefore not new in archive terms, but the current registration is recent.

Regulatory Verification Notes

No legal, terms, privacy, or about content could be retrieved, so there is no company name, licence, or registration number to assess. The gating of the homepage is the reason for this. The site's disclosure position is therefore unclear and is not itself evidence of misconduct. Registration details are incomplete and ownership is opaque, so the real-world operator has not been independently connected to any brand or person. No third-party broker or regulatory-database match exists for this domain, so no external reputational context applies either way. The domain's reputation signals carry the assessment, not any licensing finding. A valid but entry-level certificate shows only that traffic is encrypted. It says nothing about who operates the site. Evidence:

• Registration: the domain is held through GoDaddy.com, LLC, created 2026-08-13 and expiring 2027-08-13, with owner details incomplete.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-10, with 76 days remaining.
• Legal and identity pages: none were reachable in the captured material, and no operator identity was verified.

What to Verify Next

Before any engagement, the operator should be required to demonstrate who they are through channels independent of this domain. That means a corporate registry lookup for the claimed entity and, if any financial or custodial service is offered, a check of the relevant regulator's public register. The domain owner should also be asked to explain why the security warning is being shown and whether the domain was re-registered after its 2023–2025 archive presence. If an organisation has directed traffic here, it should confirm the address through an offline or previously established contact route. Any official support or contact channels should be confirmed the same way, not through links on this site. Evidence:

• Registration record: the current registration began on 2026-08-13 and is incomplete, so the operator cannot be tied to a registry entry.
• Archive record: 5 snapshots between 2023 and 2025 show earlier activity that cannot be attributed to the current registrant.
• Homepage: no operator name, licence, or registration identifier could be read from the captured content.

Summary Verdict

The available evidence supports an elevated-risk posture. Confirmed adverse reputation signals dominate the assessment, and the site's purpose and operator remain unverified. Supporting technical hygiene does not offset them, and any apparent normality should not be taken as legitimacy.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall. All four observed addresses are shared edge nodes, and the origin server was not observable, so the hosting cannot be independently verified. The protection layer is also the source of the bot challenge that blocked inspection of the page. This is a mitigating factor only: it reflects ordinary shielding and does not offset the external threat detections.

Closing Assessment

The domain should not be used for login, credential entry, wallet connection, payments, or downloads. Any contact should be limited to non-interactive viewing, preferably from an isolated environment. If the site has been referred by a third party, treat that referral as unverified until it is confirmed independently.