Is livepumpsolstreamers.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a recently launched, single-domain website whose homepage is titled "Pump". Its domain name points to a crypto-themed live-streaming or token-promotion proposition tied to the Solana ecosystem. It presents itself to visitors as a standalone landing page, with no third-party brand affiliation established by the evidence, and its apparent purpose is to attract visitors into a pump-style crypto streaming or token offering.

Scam/Impersonation Risk

The decisive finding is that the domain is currently blacklisted. Several independent threat-intelligence engines classify it as malicious, and a few more rate it suspicious. One of them is a well-known enterprise network-security vendor that is widely relied on for web filtering. An independent external blacklist also lists the domain. The breadth of these detections is enough to override every positive signal collected, so the site must be treated as a hostile or high-risk destination. No conflicting legal entities or specific brand impersonation were observed, and none is needed for this conclusion. The threat is established by the confirmed listings alone. The behavioural sandbox did not record wallet-connection prompts, wallet-drainer routines, clipboard manipulation, hidden forms, or credential posts to external hosts across three successful runs. This absence does not offset the blacklisting, because malicious behaviour on this class of site is often delivered conditionally. The homepage also produced a high volume of browser console errors, which suggests an unpolished or hastily assembled build. The domain is also very young, which fits the profile of throwaway infrastructure set up for short-lived campaigns. Evidence:

• Homepage: 10 threat-intelligence engines flagged the domain as malicious and 3 as suspicious, and an external blacklist also lists it.
• Homepage: the behavioural sandbox recorded no external network calls across 3 runs, but logged 18 console errors.
• Domain registration: registered 2026-09-02 (~0.14 years, about 52 days old) through NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web archive: only 4 snapshots, all in 2026, between 2026-09-03 and 2026-09-21 (1 year tracked).

Regulatory Verification Notes

The site is not covered by any regulatory registration that could be independently confirmed, and no third-party broker or regulator profile matches it. On-page disclosure of the operator, licensing, or legal terms is unclear, and domain ownership is opaque. This is an ownership-opacity limitation rather than an identity contradiction. Together with the blacklisting, it means no accountable legal entity can be identified to answer for the site's claims or hold customer funds. The security services the site relies on (a valid certificate and a managed network edge) show only that the site is technically configured. They say nothing about its licensing or legitimacy. Evidence:

• Homepage and legal pages: no operator name, licence, or registration reference is clearly disclosed.
• Site transport encryption: the TLS certificate is Domain Validated (DV) and issued by WE1, valid to 2026-12-01. This level of validation confirms domain control only, not the operator's identity.
• Domain registration record: the registrant details are incomplete, consistent with ownership opacity.

What to Verify Next

Before any engagement, the operator's legal identity should be established through an independent route. Any claimed licence or registration should be checked directly with the relevant financial or securities registry. Official contact channels should be confirmed through an offline or well-established independent source. The domain should also be checked against any official project or token channels it claims to represent, to rule out lookalike or impersonation use. If the domain is used internally or by customers, the organisation should check whether it already appears in logs, links, or messages, and consider blocking it at the web gateway. Site owners or hosting contacts should be notified if the site is believed to be compromised rather than purpose-built. Evidence:

• Homepage: the page presents a "Pump" title with no visible corporate or regulatory identifier.
• Domain registration: the domain is only about 52 days old, so no long-term ownership record can corroborate any claim.
• Threat listings: the current malicious classifications should be re-checked after any remediation claim before the site is trusted.

Summary Verdict

The overall posture is clearly cautionary and security-forward. The decisive factor is confirmed malicious classification by multiple independent sources, and it outweighs the technical hygiene and clean behavioural runs observed. The domain's very recent creation and its thin history leave no established reputation to counterbalance this. Legitimacy cannot be considered apparent, and sensitive use of the site is rated unsafe.

Infrastructure Integrity

The site is served from AS13335 (Cloudflare, Inc., US), with four edge addresses observed across IPv4 and IPv6. The origin server was not visible, so hosting cannot be verified independently, and the edge layer can mask rapid content changes. Bot protection is active and no cloaking was detected. This is a mitigating factor only, because shared edge infrastructure is available to any customer and does not reduce the reputational risk.

Closing Assessment

The site should not be used for login, credential entry, wallet interaction, or any financial activity. If it must be examined at all, it should be viewed read-only from an isolated environment, with nothing downloaded from it.