Is livesolstream.xyz a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly registered website on the .xyz top-level domain. Its homepage is a single landing page titled "Pump", which loads normally and shows no interactive features that could be classified. The evidence does not establish a clear product or business model for it.

Scam/Impersonation Risk

Confirmed contradictory signals are present. Several tier-one security vendors currently flag the domain as malicious, and a wider set of external detections reinforces this. Together these amount to a confirmed blacklisting of the site. The detections carry no specific attribution, so they cannot be discounted or traced to a single cause. The domain was registered only weeks before the assessment and has almost no archived history. That profile fits throwaway infrastructure, and the generic "Pump" branding on the homepage gives a visitor no clear way to confirm who runs it. No conflicting legal entities were found, and no brand impersonation was confirmed. The risk rests on the reputation hits and the very young footprint. Automated browsing of the homepage showed no external data submissions, wallet-connection attempts, clipboard manipulation or hidden forms. That is a mitigating observation and does not offset the external detections. Fresh domains can swap content rapidly, so a clean capture today does not guarantee what a later visitor would see. Evidence:

• Homepage: security vendors Fortinet, Kaspersky and Sophos all flag the domain, and the external blacklist state is confirmed.
• Domain registration: registered 2026-08-25 (~0.17 years old), through registrar Global Domain Group LLC.
• Web archive: 3 snapshots spanning 2026-09-05 to 2026-09-21 (1 year tracked), which is very thin history.
• Homepage behavior: three sandbox runs showed no external requests or posts, but the page logged 18 console errors.

Regulatory Verification Notes

The captured page does not state a licensed operator, a registered company, or a regulator relationship. Any such disclosure can therefore not be assessed from the site, and the on-page disclosure position remains unclear. Registration details are incomplete, so ownership and governance are opaque. This is an administrative limitation and is not an identity contradiction. A missing license is a verification gap and does not by itself indicate fraud. Here, however, the gap sits alongside confirmed external detections, so it carries more weight than it would on an established site. No third-party broker or regulator record matched this domain. That absence is neutral and does not vouch for the site. Evidence:

• Homepage: no operating company, license number or regulator reference appears in the captured content.
• Domain registration: owner details incomplete, registered 2026-08-25, expiring 2027-08-25.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2027-01-22. A domain-validated certificate confirms only control of the domain and says nothing about the operator.

What to Verify Next

Any prospective interaction should first be tested against independent sources. These include a fresh check of public threat-intelligence reputation for the domain and a search of the relevant national financial and consumer-protection registries for any claimed operator. Official contact and support channels should be confirmed through an independent, offline route. Any claim that the site is linked to a known brand or project should be checked on that brand's own verified channels. This is more reliable than following links from the site itself. Evidence:

• Homepage: the page offers no verifiable operator identity to cross-check.
• Domain registration: the age of roughly two months means no long-standing public record exists to corroborate it.
• Web archive: the minimal snapshot history gives no earlier version of the site to compare against.

Summary Verdict

The site is assessed at the lowest tier of trust and carries elevated risk. Confirmed blacklisting by multiple security vendors, combined with a very young domain, an opaque operator and no corroborating history, outweighs the technical hygiene observed. Its valid certificate and clean automated browsing behavior do not change that conclusion.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All four observed addresses are Cloudflare edge servers, and the origin server was not observable, so the real hosting location cannot be independently verified. This protection is a mitigating factor only. It can mask rapid content changes and does not offset the external threat detections. A heuristic also notes a young domain with sparse subdomains, which is unconfirmed and consistent with the domain's age.

Closing Assessment

The site should be treated as read-only at most. Credentials, account logins, wallet connections, payments and any financial interaction with it should be avoided. If the site was reached through an unsolicited message or advertisement, the link should be reported to the sender's platform and not followed again.