Is solnuser.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website presented at solnuser.com is a very recently established, single-page site whose homepage is titled "Solana Spin". It carries only a short block of text, and the captured content does not describe a product, an operator or a clear business model. The title points to a Solana-themed, spin-style offering, but the site's own content does not confirm what it provides.

Scam/Impersonation Risk

The available evidence shows confirmed adverse reputation contradictions. Multiple established security vendors, including several tier-one detection engines, currently flag the domain as malicious or suspicious, and the domain is blacklisted. A site that is only weeks old and already carries this level of third-party condemnation fits the profile of disposable, short-lived infrastructure. No brand impersonation was observed, and no conflicting legal entities appear. The listing is therefore the decisive risk driver, not a mismatch of identities. Automated browser sessions found no hidden forms, wallet-drainer or clipboard-hijack behavior, no cloaking, and no outbound data submission. These observations are not enough to offset the vendor detections, and behavior shown during a limited test window does not guarantee the page will stay benign. The page is minimal, which also leaves little content against which its stated purpose could be tested. Evidence:

• Homepage: security vendors currently flag the domain as malicious and suspicious, and it is blacklisted.
• Domain registration: created 2026-08-28 through PDR Ltd. d/b/a PublicDomainRegistry.com, about 0.16 years (roughly two months) old.
• Homepage: titled "Solana Spin" with only a few hundred characters of text and no product, operator or terms detail.
• Sandbox sessions: three successful runs recorded no external requests, no wallet-connect or clipboard activity, and no cloaking.

Regulatory Verification Notes

The captured pages show no licensing information, no company name, no registration number and no legal or terms pages. The operator's real-world identity could not be independently connected to any person or company. Because the name suggests a spin-style, Solana-related offering, any gaming, token or financial activity would normally require a verifiable licence and a named responsible entity. Neither is shown. This is a verification gap, and the adverse reputation findings above are what drive the risk. No third-party broker or regulatory-database entry was matched for the domain. The transport encryption is valid, but a domain-validated certificate only proves control of the domain and says nothing about who operates the site. Evidence:

• Homepage: no licence, registry reference, company name or jurisdiction is stated.
• Site-wide: no terms, privacy or about pages were captured that could establish a legal operator.
• TLS certificate: issued by WE1 (DV), valid to 2026-11-26.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any reassessment should begin with the security-vendor detections, since the site should not be treated as safe until they are cleared. Independent steps include checking whether the listings are later withdrawn. They also include searching for a named operating entity and a matching licence in the relevant national gaming or financial registry, if the site is ever claimed to offer such services. Official contact and social channels should be confirmed through an independent route, not through links on the site. Domain age should be considered again once the site has a longer track record. Evidence:

• Domain registration: the current term runs to 2027-08-28, so the domain is registered for about one year.
• Homepage: no stated product or operator details exist to check against any registry.
• Reputation status: detections are active as of this analysis, so any reassessment depends on their removal.

Summary Verdict

The posture is clearly cautionary and the risk is elevated. A brand-new domain with active malicious detections from multiple security vendors, no verifiable operator, and almost no explanatory content does not meet the standard of an established or trustworthy website. Technical hygiene and quiet behavior in sandbox testing do not change that conclusion.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the origin server is not observable. This is a mitigating factor only. It shows ordinary, professionally managed delivery and a valid certificate, but it does not establish legitimacy. Because only the edge is visible, content could be changed quickly behind it without being noticed. It also cannot offset the active reputation detections.

Closing Assessment

The site should be treated as read-only at most. Visitors should not log in, enter credentials, connect a wallet or make any payment or financial transaction. Anyone who has already interacted with it should treat any shared credentials or approvals as potentially exposed.