Is livepumpfunsol.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, livepumpfunsol.xyz, is a newly registered domain whose name evokes a Solana-based token-launch or meme-coin trading service. When automated visitors loaded its homepage, it presented no visible text, title, links, forms or scripts, so its products and business model could not be established from the site itself. Its apparent purpose therefore cannot be confirmed from the site's own content.

Scam/Impersonation Risk

Contradictory signals are present. At least two independent security engines currently flag the domain as malicious, including a top-tier security vendor, and the aggregated external reputation assessment is a confirmed blacklist listing. Web-archive history also marks the domain as previously associated with phishing. This convergence is decisive: a domain only weeks old that carries malicious detections and a phishing association fits the lifecycle of disposable, abuse-oriented infrastructure. The domain name pairs a well-known token-launch platform's name with a blockchain suffix. That is the naming pattern commonly used to attract crypto users to look-alike sites. No specific brand impersonation was confirmed and no conflicting legal identities were observed, so the concern rests on the reputation findings and not on identified deception. The empty homepage does not reduce this risk, because a blank or gated page can be swapped for a wallet-connection or credential-harvesting interface without notice. No contact email was published for assessment. Evidence:

• Homepage and external reputation: two engines report malicious detections, one of them a top-tier vendor, and the combined external reputation check confirms a blacklist listing.
• Historical record: the domain is flagged as previously linked to phishing activity.
• Registration: the domain was created on 2026-09-24 (~0.07 years, about 25 days old), registered through NameSilo, LLC.
• Homepage behavior: three sandbox runs returned an empty document with no metadata, forms, or sensitive-input elements, and the page sits behind bot-protection filtering.

Regulatory Verification Notes

The site has no legal, terms, privacy or about pages that could be reviewed. It claims no license, registration number or regulator. No third-party broker-reputation record matched the domain, so no broker-level reputational signal exists in either direction. Registration details are shielded by a privacy service, which is an administrative matter and not a separate finding. Real-world operator identity remains unverified, and nothing on the site supports a connection to any named company or person. The security-relevant technical facts are limited to a valid but entry-level transport certificate. Evidence:

• Homepage: no company name, licence, registration number or regulator disclosure was observable.
• Transport encryption: TLS certificate issued by YE2 (DV, domain validation only), valid to 2026-12-23.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Registration record: owner shown as a privacy-service placeholder, registrar NameSilo, LLC, expiry 2027-09-24.

What to Verify Next

Treat the site as unsuitable for any sensitive interaction until the external detections are cleared. Anyone who reached this domain through a link, advert or social post claiming to represent a token-launch platform should compare it against the official channels that platform publishes, and should reach those channels independently, not through this link. If the domain is later claimed by a legitimate operator, that operator should be asked for a verifiable corporate identity and any applicable licence, checked directly with the relevant registry. Re-test the domain only after its content has stabilised and the security-vendor detections have been delisted. Evidence:

• Homepage: no content to validate any claimed affiliation or product.
• External reputation: current malicious detections and a blacklist listing remain unresolved.
• Domain age: the registration is only weeks old, so no operating track record exists to compare against.

Summary Verdict

The overall posture is high-risk and cautionary. Confirmed external threat detections combine with a very recent registration, an unverified operator and a historical phishing association. The protections the site does have are routine and cannot offset that reputation damage.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers across IPv4 and IPv6. The origin server is not observable, so the real hosting location cannot be independently confirmed, and content could be changed behind the edge without outside notice. The edge infrastructure and bot-protection layer are a mitigating factor only. Such services are available to any customer, legitimate or not, so they say nothing about the operator's intent and cannot offset the reputation findings. A heuristic notes the combination of a young domain and sparse subdomains, but this is unconfirmed and carries no weight beyond the verdict.

Closing Assessment

Do not enter wallet connections, seed phrases, credentials, or payment details on this domain, and do not download anything from it. Reach any related service only through independently confirmed official channels. Anyone who has already interacted with the site should review their wallet permissions and account security.