Is apes-of-pump.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This is a recently launched website on the low-cost ".xyz" top-level domain. During analysis it could not be viewed as intended: the visitor-facing page was replaced by a security interstitial headed "Suspected Phishing", and the site's real content, products and business model could not be seen. Its apparent purpose is therefore unconfirmed. The behaviour of the page and the reputation signals around it point to a site designed to attract visitors into sensitive interactions.

Scam/Impersonation Risk

The most serious finding is the site's standing with outside parties. Several independent threat-intelligence engines classify the domain as malicious or suspicious, and it is blacklisted by external reputation sources. The security interstitial returned to the analysis browser on the homepage carries an explicit suspected-phishing label. This is a decisive, convergent reputational signal rather than a one-off flag. No conflicting legal-entity names were observed, and no brand impersonation was confirmed. The risk rests on the blacklisting and the phishing-style warning, not on identity contradictions. Behavioural testing found no wallet-connection prompts, clipboard tampering, hidden forms or credential posts to outside parties. That is a mitigating observation but does not offset the blacklisting. The page did show a very high share of traffic going to third-party hosts, heavy background requests, repeated script errors and a sharp page rebuild after interaction. Together these are consistent with a heavily scripted front end that loads most of its content from elsewhere, which is typical of disposable campaign sites. Evidence:

• Homepage: the capture returned a bot-challenge response titled "Suspected Phishing", so the site's own content was never served to the analysis browser.
• Domain registration: registered in 2026 (~0.21 years, about 75 days old), within the last few months.
• Homepage behaviour: about 97% of observed outbound requests at peak were to third-party hosts, with 16 console errors and about 1,500 page mutations after interaction.
• External reputation: the domain is blacklisted and flagged malicious by multiple threat-intelligence sources, while the shared hosting address itself carries no abuse reports.

Regulatory Verification Notes

No legal, terms, privacy or about pages could be reached, so no licensing status, corporate registration or named operator could be assessed. The real-world operator therefore remains unconnected to any known person or organisation. This is a verification gap, not proof of wrongdoing, and the decisive concern here is the external reputation findings rather than any missing disclosure. No third-party broker or regulatory-database match exists for the domain, so there is no outside evidence of authorisation to offer financial services. The registration is through a commercial registrar, and the site presents a valid but entry-level encryption certificate. A certificate of this kind confirms only that traffic is encrypted. It says nothing about who runs the site. Evidence:

• Registrar of record: Global Domain Group LLC, registration created 2026-08-12 and expiring 2027-08-12, a one-year term.
• Transport security: TLS certificate issued by WE1 (DV, domain-validated only), valid to 2027-01-08.
• Network location: served from AS13335 (Cloudflare, Inc., US).
• Homepage and policy pages: no accessible operator, licensing or registration statement was available to review.

What to Verify Next

Because the site is blacklisted and shows a suspected-phishing warning, any further checks should be done only from an isolated, non-production environment. Ask the party that supplied the link, such as an advertisement, message or social post, to confirm through an independent route that it is genuine and not a lookalike. Search the relevant financial-services and company registries for any entity that claims to run this site. If a similar legitimate brand exists, compare its official domain with this one character by character. Confirm any official support or contact channels offline, not through links on this site. Evidence:

• Domain age: registered about 75 days before analysis, too recent to have built a verifiable operating record.
• Homepage: no operator or entity statement could be accessed for cross-checking against registries.
• Reputation: independent threat-intelligence listings are active and should be re-checked before any reassessment.

Summary Verdict

The overall posture is high risk. Active third-party threat listings, a phishing-style warning on the homepage and a very young domain with an unverified operator converge on a clearly cautionary assessment. The absence of confirmed impersonation or wallet-drainer behaviour does not change that posture.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and all observed addresses are Cloudflare edge servers, so the true hosting origin is not visible. The infrastructure is mainstream and the certificate is valid, which are mitigating factors only. They cannot offset the reputation findings. Edge-only visibility also prevents independent checks of the hosting and allows content to be swapped quickly without a change in network location. An unconfirmed heuristic notes a young domain with few subdomains, consistent with a recent launch.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any payment or financial activity. At most, brief read-only viewing from an isolated environment is appropriate. Anyone who has already entered credentials or connected a wallet should change those credentials and revoke any wallet permissions immediately.