Is solchaindapps.com a scam? TrustSniffer's high-risk assessment: 4/100

Security Alert

Fortinet, Google, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, served from a domain name that evokes Solana-based decentralized applications, presents a single home page titled "Home | Meteora". It appears to be a crypto or decentralized-finance front end that invites visitors to interact with a blockchain application. The evidence does not show what the page offers beyond that branding, so its precise business model cannot be established.

Scam/Impersonation Risk

This site carries confirmed adverse reputation. It is blacklisted by multiple independent threat-intelligence sources. A major browser-safety service flags it under a social-engineering category, which is the classification used for phishing and deceptive-site behavior. A large cluster of security engines also rates it malicious, including several top-tier vendors. This external convergence is the decisive factor in the assessment. The page title adopts a well-known DeFi brand name that does not match the domain it is served from. That mismatch fits a lookalike or brand-borrowing pattern. It is not, by itself, a confirmed impersonation finding, but it should be read together with the blacklisting. No conflicting legal-entity names were observed. In a controlled test session the page made no external requests, attempted no wallet connection or clipboard manipulation, and showed no cloaking. This lowers the likelihood of automated drain-style behavior on first load. It does not offset the external detections, because malicious behavior can be gated behind user interaction or later content changes. The domain is also very new, which is consistent with a short-lived campaign infrastructure pattern. Evidence:

• Homepage: the page title presents a recognised DeFi brand name on an unrelated domain.
• External reputation: the site is blacklisted by multiple independent sources, including a social-engineering classification and detections from several top-tier security vendors.
• Domain provenance: registered 2026-07-10 (~0.29 years, about 107 days old); the domain is not listed in any public DeFi protocol directory.
• Sandbox session: three successful runs showed zero external requests, no wallet-connect activity, and no cloaking.

Regulatory Verification Notes

No regulatory registration or licence could be linked to the site by third-party sources. No broker-reputation database entry matched it. The on-page disclosure position is unclear, and the operator's real-world identity has not been independently verified. These are verification gaps and are not, by themselves, evidence of wrongdoing. Here they sit alongside confirmed threat detections, so the absence of any verifiable regulated status removes a potential mitigating factor. The domain is registered through a corporate registrar, Realtime Register B.V., with a one-year term. That is an administrative fact and does not establish who operates the site. The transport-encryption certificate is valid but domain-validated only. It confirms an encrypted channel and nothing about who runs the site. Evidence:

• Registration: registrar is Realtime Register B.V.; created 2026-07-10 and expires 2027-07-10.
• Transport security: TLS certificate issued by WE1 (DV), valid to 2026-12-06 (41 days remaining).
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Disclosure: no licence, registry number, or verifiable operator identity is established from the available evidence.

What to Verify Next

Before any interaction, the brand shown on the page should be checked against the official project's channels, reached independently of this site. Those channels are its documentation, its verified social accounts, and its published application address. If the official application lives on a different domain, this site should be treated as an imitation and reported. Any claim of regulated status made by the operator should be checked directly with the relevant registry, not through links on the site. Official support and contact channels should be confirmed through an offline or independent route. Organizations should also check whether staff or customers have already received links to this domain through messaging or advertising. Evidence:

• Homepage: the page title uses a brand identity that must be confirmed against the official source.
• External reputation: current detections suggest that any link to this domain circulating internally should be blocked and reviewed.
• Identity status: the real-world operator has not been independently verified.

Summary Verdict

The site sits in a high-risk posture. Confirmed blacklisting and security-vendor detections outweigh every technical and behavioral positive observed. The provenance assessment has failed, and the operator's identity remains unverified. Its positives are limited to routine technical hygiene and a quiet test session, and these do not establish legitimacy.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF. All observed addresses are edge servers, and the origin host was not observable. This is a mitigating factor only, since it shows a mainstream, reputable provider and not abusive hosting. It also prevents independent verification of the real hosting location. Because content can be swapped behind the edge without visible change, the protection cannot offset the reputational risk.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any financial interaction. Any such activity already carried out should be treated as potentially compromised, with credentials reset and wallet approvals reviewed and revoked. Read-only viewing from an isolated environment is the only proportionate use, and the domain should be blocked in organizational controls.