Is livepumpsolstreamers.xyz a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at livepumpsolstreamers.xyz is a single-page property titled "Pump". Its domain name points to a live-streaming theme tied to the Pump token-launch ecosystem on Solana. The captured homepage returned normally, but the evidence does not reliably show what it offers or which organisation operates it. It appears to be a recently created, crypto-themed destination whose commercial purpose is unconfirmed. Independent threat-intelligence sources currently flag it as malicious.

Scam/Impersonation Risk

This is the decisive area of the assessment. A confirmed external blacklisting applies, and a substantial group of independent security engines classify the domain as malicious, with a further group marking it suspicious. At least one major reputation source also associates the domain with known phishing activity. The specific nature of the detections is not itemised. Direct brand impersonation and conflicting legal identities were not separately established, so the risk rests on the reputational convergence and not on a named impersonated brand. The domain is only weeks old and carries a crypto-streaming name that borrows the vocabulary of a popular token-launch ecosystem. That pattern is typical of throwaway lookalike or lure domains that trade on a recognisable name. In the sandbox, the homepage made no external network calls, hidden forms or wallet-connection attempts. It also showed no clipboard manipulation. The page raised 18 console errors, which is consistent with an unpolished or hastily assembled build. These benign behavioural results do not offset the blacklisting, because a page can be switched to a malicious payload after a clean first impression. Evidence:

• Homepage and domain reputation: eleven security engines flagged the domain as malicious and three as suspicious, and a confirmed external blacklist applies.
• Registration: domain registered 2026-08-31 (~0.15 years, about 54 days old), so no track record exists.
• Web archive: 1 snapshot in total, first and last seen 2026-09-03 (1 year tracked), so the site has no meaningful history.
• Homepage behaviour: three sandbox runs recorded zero external requests and no wallet-connect or drainer activity, alongside 18 console errors.

Regulatory Verification Notes

The captured homepage identifies no operating company, registered address, licence or registration number, and no legal or terms pages were evidenced. For a site with crypto-oriented branding, that omission is a disclosure gap. On its own it would not prove fraud, but here it compounds an already severe reputational finding. Ownership opacity also applies: the registration record is incomplete and does not tie the domain to an identifiable operator. That is an administrative limitation and not an identity contradiction. The registration runs through Global Domain Group LLC, and the certificate is a basic domain-validated one. Both are routine and do not establish who runs the site. No third-party broker or regulator record matched the domain. Evidence:

• Homepage: no company name, licence, registration number or legal-entity disclosure was captured.
• Registration: registrar is Global Domain Group LLC; created 2026-08-31, expires 2027-08-31; owner details incomplete.
• Transport security: TLS certificate issued by WE1 (DV level), valid to 2026-11-29, with about 35 days remaining. Domain validation confirms control of the domain and nothing about the operator.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any party considering engagement should first establish whether a legitimate organisation claims this domain. The way to do that is to look for a link to it from the official channels of the brand or project the name evokes, reached independently and not through this site. A related step is to confirm through the relevant financial or virtual-asset registry whether any named operator holds authorisation for the services implied by the branding. Because the blacklisting is current, any reconsideration should wait until independent reputation sources have cleared the domain and the operator has been identified through an offline route. Official support or contact channels should be confirmed independently, not through the site. Evidence:

• Homepage: no outbound identity, licence or official-channel references were captured to cross-check.
• Reputation: the current blacklisting and malicious classifications are the gating condition for any re-evaluation.
• Registration: a domain only weeks old gives no history to corroborate a claimed brand relationship.

Summary Verdict

The available evidence supports a high-risk posture. A confirmed blacklisting and broad malicious classification by independent security sources dominate the assessment. Domain youth, an absent operating identity and a lack of any independent track record reinforce it. The benign sandbox behaviour and the valid certificate are insufficient to change this outcome.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is a Cloudflare edge address. The origin server could not be seen. This is a mitigating factor only. It reflects ordinary protective hosting that is freely available to any operator, including abusive ones. It also prevents independent verification of the true hosting location and can conceal rapid content changes behind a stable front. The domain's very young age and sparse subdomain footprint are unconfirmed heuristics and carry no independent weight beyond the verdict. The protections cannot offset the reputational findings.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, token approvals or any payment or financial interaction. At most, passive read-only viewing from an isolated, non-sensitive environment is tolerable, and avoiding the site altogether is the safer course. Anyone who has already interacted with it should treat the credentials or wallet permissions involved as potentially compromised. They should rotate passwords and revoke any approvals granted.