Is solanadayspa.com a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This site is a Chinese-language landing page for a cryptocurrency trading service. Its page title reads "Ou Exchange official website – a world-leading digital asset trading platform." The captured homepage is brief and presents itself as the official portal of a digital asset exchange, which implies account registration, deposits and trading. The domain name (a Solana-themed "days spa" wording) has no evident connection to an exchange brand, and no operating company is named on the page.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several independent threat-intelligence sources currently flag the domain as malicious or suspicious, and an external blacklist corroborates this, so the domain is blacklisted. Safe-browsing reputation did not flag the site. No conflicting legal entities were found, and brand impersonation was not confirmed. The blacklisting alone is enough to put the site in a high-risk posture. The registration history adds to the concern: the domain was registered only about two months ago, yet the web archive holds a long record under the same name. This points to a lapsed, previously used domain that was re-registered and put to new, unattributed use, rather than a long-running operator. A site that bills itself as an "official" global exchange while sitting on a freshly re-registered, unrelated-sounding domain fits a pattern commonly used to harvest credentials or deposits. Behavioural testing showed no wallet-connection prompts, clipboard tampering, hidden forms or content cloaking. It did record two background data submissions from the homepage to external, non-whitelisted destinations, which could receive user-supplied data. Those destinations have not been attributed to any known operator. Evidence:

• Homepage and domain registration: registered 2026-08-18 (~0.19 years old), through Realtime Register B.V.
• Archive record: 119 snapshots spanning 2005–2026 (22 years tracked), with a multi-year gap and a changed use of the domain.
• Reputation: two engines rated the domain malicious and one suspicious, among roughly ninety evaluated, with an external blacklist match.
• Homepage behaviour: two external submissions to non-whitelisted destinations (about half of observed XHR traffic was external); no wallet, clipboard or hidden-form activity.

Regulatory Verification Notes

A platform that presents itself as a digital asset exchange would normally disclose an operating entity, a jurisdiction and its licensing status. The homepage discloses none of these, and no regulator or registry source corroborates the site. Ownership is opaque, and nothing connects the domain to any real-world company or person. This is a verification gap in its own right, but the verdict rests on the blacklisting and provenance concerns above, not on the missing disclosures. No third-party broker or regulatory-watchlist record matched the domain, so there is no reputational context beyond the threat listings. The supporting technical elements are routine and give no assurance of legitimacy. The certificate is a basic domain-validated one, and the hosting is commodity data-centre space. Evidence:

• Hosting: served from AS139646 (Hong Kong Lightlayer Technology), with the IP geolocated to Seychelles (AFRINIC registry).
• Transport encryption: TLS certificate issued by YR2 (DV), valid to 2026-11-16, 21 days remaining.
• Homepage: about 1,150 characters of text, with no licence, registration number or operating-company reference.

What to Verify Next

Anyone considering contact should first establish whether the genuine exchange being echoed in the page title recognises this domain. The check should use contact details or links obtained independently from the exchange's long-established official channels, never from this site. Any claim of licensing should be checked directly in the relevant financial regulator's public register. Security teams should treat the domain as untrusted until the threat listings are cleared and the operator is identified through a trusted route. Outbound traffic to the destinations contacted by the homepage should be reviewed and blocked where appropriate. Evidence:

• The captured evidence consists of the homepage only, with no separate legal, about or contact pages to cross-check.
• The homepage names no operator, address or registry number that could be checked against an independent source.

Summary Verdict

Available evidence supports a critical-risk assessment. Confirmed threat-intelligence listings, an abrupt change in how an aged domain is used, and an unidentified operator behind an "official exchange" front outweigh the few routine technical positives. The site cannot be treated as legitimate or as a safe point of interaction.

Infrastructure Integrity

The site runs on a single directly exposed IP address at a low-cost data-centre provider, with no CDN or WAF in front of it, so nothing shields or masks the origin server. DNS behaviour shows unconfirmed heuristic indicators: short record lifetimes consistent with rapid address rotation, and a sparse subdomain footprint typical of a newly stood-up domain. These are weak signals on their own, but they match the young-domain profile and offer no mitigation.

Closing Assessment

Interaction should be limited to passive, read-only viewing, if it happens at all. No login, credential entry, wallet connection, deposit or other financial transaction should be attempted on this domain. Users who encountered the site through an unsolicited message or advertisement should discard that message and report it to the genuine exchange's security team.