Is livemem.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This is a recently registered website on the low-cost ".xyz" top-level domain. Its homepage did not present normal business content to the automated visitor. It returned a security interstitial labelled as a suspected-phishing warning, and the only text captured was the roughly four hundred characters of that notice. No products, services, pricing or account functions could be observed. The site's purpose and business model therefore cannot be established from the page itself, and the available evidence points to an elevated-risk web property rather than an established service.

Scam/Impersonation Risk

Contradictory signals are present and are the decisive factor in this assessment. The domain is confirmed blacklisted: multiple independent threat-intelligence sources currently classify it as malicious or suspicious, and a prior phishing designation is on record. The homepage itself served a phishing warning in place of content, which is consistent with those external detections. No conflicting legal-entity names were found, and no specific brand impersonation was confirmed. The risk rests on the blacklisting and phishing designation, not on identity inconsistency. The behavioural sandbox found no wallet-connection prompts, clipboard manipulation, hidden forms, credential forms posting to outside parties, or fingerprinting. It did record a very high share of outbound requests and many script errors during page load. This pattern is common when a page is replaced by an interstitial or assembled from external resources, and it does not offset the confirmed listings. The domain's newness is an aggravating factor, because disposable and short-lived domains are a common vehicle for phishing campaigns. Evidence:

• Homepage: the page title and body are a suspected-phishing interstitial, and the capture was blocked with an access-denied status.
• Domain registration: registered 2026-07-31 (~0.24 years, about 88 days old), so the site has no established operating history.
• Sandbox behaviour (three runs): 29 external XHR/fetch calls and 9 external POST requests, with up to roughly 96% of external activity directed outward. All destinations were on known-benign lists, and there were 28 console errors.
• External reputation: two engines rated the domain malicious and two suspicious, alongside a blacklist hit and a known-phishing record.

Regulatory Verification Notes

The site presents no legal, terms, privacy, about or licensing pages that could be assessed, because the captured content is the warning interstitial. No regulator or broker database match exists for the domain, and no third-party reputational record from broker-review sources was found. Registration details are incomplete, which amounts to ownership opacity. That is an administrative limitation and not an identity contradiction. It does mean the real-world operator cannot be tied to any named entity or licence. Nothing in the available material supports treating this site as a licensed or regulated service. Evidence:

• Registration: the registrar is Global Domain Group LLC, with registration running to 2027-07-31 and the registrant record incomplete.
• Transport security: a TLS certificate issued by WE1 (domain-validated only), valid to 2026-12-27 (61 days remaining). This confirms encryption but does not confirm who operates the site.
• Hosting network: AS13335 (Cloudflare, Inc., US).

What to Verify Next

No interaction should proceed until the listings are resolved. If the domain was reached through an email, message, advertisement or social post, trace that source and treat it as suspect. Any organisation the link claimed to represent should be contacted through contact details obtained independently of this site, for example from its official registry entry or a known offline channel. Official support or contact channels should be confirmed the same way. If credentials, payment details or wallet approvals were already submitted here, the affected passwords should be changed and the relevant accounts and cards reviewed with the providers. The domain's status should be re-checked with the major threat-intelligence sources after a reasonable interval, because the listings may change. Evidence:

• Homepage: the warning interstitial gives no operator, brand or contact information to confirm.
• Registration record: the domain is only about three months old and has an incomplete registrant record, so no independent anchor to a named entity exists.
• External reputation: the current blacklist and phishing designations are the baseline against which any later re-check should be compared.

Summary Verdict

The overall posture is high-risk. Confirmed external threat detections, a phishing designation and the lack of any verifiable operating history outweigh the site's technically orderly setup. The evidence does not support treating this as a legitimate, established service.

Infrastructure Integrity

The site sits behind a trusted CDN/WAF provider, and all four observed addresses are edge nodes. The origin server was not observable, so the real hosting location cannot be independently confirmed. A young domain with sparse subdomains is a mild unconfirmed heuristic. Bot-challenge protection was active during capture. These protections are mitigating at most. They show competent edge configuration, not legitimacy, and they cannot offset the reputational findings.

Closing Assessment

The site should not be used for login, credential entry, payments or wallet interactions, and nothing should be downloaded from it. At most, it should be viewed read-only from an isolated environment. Anyone who reached it through an unsolicited link should discard that link and report it to the impersonated organisation or the relevant anti-phishing service.