Is solhome.cv a scam? TrustSniffer's high-risk assessment: 10/100

Overview

solhome.cv is a newly registered website on the .cv country-code domain. When visited, its homepage returned a Cloudflare interstitial page titled "Suspected Phishing" instead of any business, product or service content. The site therefore presents no identifiable offering, brand or business model, and its apparent purpose cannot be established from what it shows to a visitor.

Scam/Impersonation Risk

This site carries an elevated, confirmed adverse reputation. Several independent threat-intelligence engines currently flag the domain as malicious or suspicious, and it appears on an external blacklist. The interstitial served at the homepage also labels the site as suspected phishing, which matches the third-party detections. No brand impersonation and no conflicting legal identities were observed. The site shows no readable content, so no brand or entity is being claimed. The risk rests on the blacklist and reputation findings, not on identity conflicts. Browser-behaviour testing found no wallet-connection prompts, clipboard manipulation, hidden forms or credential posts to external destinations. Those results are mitigating, but they cannot offset the active threat detections. The page also made an unusually heavy volume of third-party network requests and produced many script errors and large page-structure changes after interaction. This pattern is consistent with a dynamic, script-driven front end or challenge layer and is not a stand-alone finding. Because the domain is very young and has almost no history, nothing exists to counterbalance the flags. Evidence:

• Homepage: the page served to the automated visit was a Cloudflare interstitial titled "Suspected Phishing", with only a small amount of text.
• Reputation scan: 3 engines reported the domain as malicious and 1 as suspicious, alongside a separate external blacklist listing.
• Domain provenance: registered 2026-07-30 (~0.25 years old), with 1 archive snapshot, all in 2026 (1 year tracked).
• Browser behaviour (3 runs): 64 external XHR/fetch calls, 9 external POSTs and 30 console errors. No wallet-drainer, clipboard-hijack or hidden-form activity was detected.

Regulatory Verification Notes

No legal, terms, privacy or about content could be read, so no licence, company registration or named operator can be assessed. The site's actual regulatory status is therefore unknown. Registration data for the domain is incomplete, which points to ownership opacity. This is an administrative limitation, not an identity contradiction. No third-party broker or regulator record matched this domain. Connecting the site to any real-world person or business has not been possible. Both the legitimacy and the identity of the operator remain unestablished. The valid certificate is a baseline hygiene item and says nothing about who operates the site. Evidence:

• Registration: the domain was created through Namesilo on 2026-07-30 and expires 2027-07-30. Owner details are incomplete.
• Transport security: the TLS certificate was issued by WE1 as domain-validated (DV) only, valid to 2026-12-26 (58 days remaining).
• Hosting: the site is served from AS13335 (CLOUDFLARENET - Cloudflare, Inc., US).
• Third-party registries: no broker or regulatory-register match was found for the domain.

What to Verify Next

Before any engagement, an independent party should check whether the operator can be traced to a real entity through channels not controlled by this domain. These include a licensed-entity search in the relevant jurisdiction's registry and an independent business-registry lookup. Any claim of affiliation should be confirmed with the supposed brand or counterparty through a previously known, offline contact route. If the domain reached a user through a message, advertisement or social post, the sender's authenticity should be checked separately. Security teams should re-check the domain's reputation status after any announced remediation, since a cleared listing would be needed before the posture could change. Evidence:

• Homepage: it exposes no legal entity, licence or registration details to compare against registers.
• Domain: its recent creation date means no long-standing public record of a stable operator exists.
• Reputation: the current adverse listings should be re-checked later, as their status can change.

Summary Verdict

The available evidence supports a high-risk posture. Active threat detections converge with a phishing-labelled interstitial and a domain with almost no operating history. The operator's identity is unestablished. The site is not suitable for any sensitive or transactional interaction in its current state.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all observed addresses are CDN edge servers. The real origin server was not observable. A mainstream, protective CDN with bot-challenge capability and a valid DV certificate is a mitigating factor only. It shows the domain is professionally fronted but gives no assurance about the operator's legitimacy. It also cannot offset the active reputation findings, because CDN protection can shield any origin, benign or malicious.

Closing Assessment

Treat the site as unsafe for logins, credential entry, payments or wallet interactions. At most, view it passively from an isolated, non-production environment. Do not download anything from it. Organisations should consider blocking or flagging the domain at the email and web gateway until its reputation is independently cleared.