Is unclaimedsol.cfd a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a service for claiming SOL, the native Solana token, from "unused" or dormant Solana accounts. Its homepage is titled "Claim SOL from Unused Solana Accounts | Unclaimed SOL". It is a single-purpose cryptocurrency recovery or claim portal that asks the visitor to recover supposedly forgotten token balances. Its apparent business model is to prompt visitors to interact with their crypto wallets in order to receive a payout.

Scam/Impersonation Risk: Contradictory signals are present and weigh heavily. Multiple independent security engines currently flag the domain as malicious, and several are among the most widely deployed enterprise-grade vendors. The detections number in the double digits and are corroborated by an additional external blacklist, so the domain is blacklisted on external reputation. The available evidence does not specify the threat category, such as phishing or malware delivery, so none is asserted here. No conflicting legal identities and no specific brand impersonation were identified. The risk stems from the reputation findings and the nature of the offer. A promise of "unclaimed" SOL from dormant accounts is a lure commonly used to induce wallet connections or signature approvals, which can lead to asset theft. The domain is also very recently registered and uses a rarely seen top-level domain. Behavioral testing of the homepage did not observe a wallet-connection prompt, clipboard manipulation, hidden forms or cloaking. It did record outbound data submissions to third-party destinations outside the expected set and a high volume of client-side script errors. These behaviors are not proof of wrongdoing, but they match the external detections and do not mitigate them. Evidence:

Regulatory Verification Notes: The page content available for analysis was limited to the homepage. No legal, licensing, terms or about pages were captured for assessment, so no regulatory status, corporate registration or named legal entity can be attributed to the operator. Independent identity verification of the operator was not achieved. No third-party broker or regulatory-database entry matched this domain. Because the domain is flagged on external reputation, any entity or license claim the site later makes cannot be accepted at face value. The transport layer is technically sound, but a valid certificate demonstrates only encrypted transport, not operator legitimacy. Evidence:

What to Verify Next: Any claim to unclaimed Solana funds should be checked independently of this site. Account balances and rent-reclaim options should be reviewed through a reputable wallet provider or a block explorer that the user navigates to directly, not through links or prompts from this domain. If the site is linked to a known project, its official channels should be confirmed through an independent route, such as the project's established documentation or verified social accounts. Any wallet that was already connected to this domain should have its token approvals reviewed and revoked. Evidence:

Summary Verdict: The overall posture is clearly cautionary and security-forward. Reputation signals from multiple independent sources converge on a malicious classification. They outweigh the technically valid encryption and the site's lack of identity-level contradictions. Neither the site nor its operator can be regarded as trustworthy on current evidence.

Infrastructure Integrity: The site sits behind Cloudflare's CDN and WAF, and all observed addresses are shared edge servers. The origin server was not observable. This protective layer is a mitigating factor for availability and basic exposure only. It cannot offset the external threat detections, and shared edge infrastructure can mask the true host and allow content to be swapped quickly. The infrastructure therefore says nothing reassuring about the operator's intent.

Closing Assessment: The site should not be used for login, wallet connection, signing, credential entry or any financial transaction. At most, it should be viewed without interaction, and nothing should be downloaded from it. Anyone who has already engaged with it should secure their wallet and revoke any approvals.

• Homepage: the page offers recovery of SOL from unused Solana accounts, a claim-style proposition that depends on the visitor trusting an unverified operator.
• Reputation: a double-digit count of security engines, including several tier-one vendors, currently classify the domain as malicious, and an additional external blacklist lists it.
• Registration: domain registered 2026-06-27, about 0.33 years (roughly four months) old, with registration details withheld through a privacy service.
• Homepage behavior: three outbound POST requests to non-whitelisted external destinations and 55 console errors were recorded across three successful sandbox runs.
• Homepage: no legal-entity name, license or registration number was available from the captured content, and no broker-database match exists.
• Registrar: registered through Dynadot, with the registrant shielded by a privacy service (Super Privacy Service LTD); registration expires 2027-06-27.
• Transport encryption: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-21.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage: the claim offer is made without any verifiable, independently confirmable source for the supposed balances.
• Reputation: the flagged status should be rechecked against current security-vendor listings before any renewed interaction.
• Wallet hygiene: any prior wallet connection or signature approval to this domain should be audited.