Is livesolstreamer.xyz a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at livesolstreamer.xyz is a very recently established site on the low-cost .xyz extension. Its homepage carries only the short title "Pump" above a few thousand characters of text. The captured evidence gives no product catalogue, pricing or operator description, so no business model is articulated beyond the streaming-themed branding suggested by the domain name.

Scam/Impersonation Risk

This is the decisive area of concern. Multiple independent security vendors, including several tier-one names, currently classify the domain as malicious, and the site is blacklisted on the strength of those detections. That is a confirmed adverse reputation. It does not by itself say whether the operator is a deliberate actor or whether the site has been compromised, because the evidence does not attribute the detections to a specific threat category. No brand impersonation and no conflicting legal identities were observed, so the concern comes from reputation rather than from identity contradictions. The sandbox runs found no external data exfiltration, wallet-connection prompts, hidden forms or clipboard manipulation. This is mildly reassuring about observed behaviour, but it cannot offset an active blacklisting. A site that appears benign in a short automated session can still serve different content to other visitors. The first-party content is also too thin to explain the detections or rebut them. Evidence:

• Homepage: a single page titled "Pump" with no described product, operator or service, so the detections cannot be reconciled with any stated purpose.
• Domain provenance: registered on 2026-08-25 (~0.17 years, about two months old) and renewed only to 2027-08-25.
• Archive depth: 4 archive snapshots from 2026-09-04 to 2026-10-11 (1 year tracked), consistent with a young site.
• Homepage behaviour: 3 of 3 sandbox runs succeeded with 0 external requests and 18 console errors.

Regulatory Verification Notes

No licence, regulator or corporate registration is established anywhere in the evidence. The real-world operator is not independently tied to a named legal entity, and ownership opacity is present. That is an administrative and verification limitation rather than a contradiction. No third-party broker or regulatory-database profile matched the site, so no reputational context from that source exists in either direction. The only external reputational signal is the set of security-vendor detections. These count as a serious reputational signal, not a legal or licensing finding. The domain was registered through the corporate registrar Global Domain Group LLC, and the site uses a valid certificate. Neither establishes who operates the site or that it is legitimate. Evidence:

• Hosting: served from AS13335 (Cloudflare, Inc., US), registry ARIN.
• Transport encryption: TLS certificate issued by WE1 at DV level, valid to 2027-01-21 (87 days remaining). This confirms domain control only, not operator identity.
• Registration: registrar Global Domain Group LLC, with no verified legal entity attached to the site.

What to Verify Next

Any engagement with this site should wait until the detections are resolved. First, re-check the domain's current standing with several independent reputation services and confirm that the listings have been formally withdrawn. Second, establish who operates the site through an independent route, such as official registries or an offline channel, rather than relying on anything the pages state. Third, if the site claims a financial, trading or token-related function, confirm any claimed authorisation directly with the relevant regulator. Fourth, confirm official support and contact channels through a source independent of the site. Evidence:

• External reputation: the adverse vendor detections are current, so the first check is whether they are withdrawn.
• Domain age: the domain was registered in 2026, so no long operating history exists to rely on.
• Certificate: it is domain-validated only, so it cannot support any identity claim.

Summary Verdict

The overall posture is high-risk and clearly cautionary. A confirmed adverse reputation from multiple security sources dominates the assessment. The site's youth, thin content and unestablished operator identity leave nothing to counterbalance it. Technical hygiene and benign observed behaviour are insufficient to support any presumption of trust.

Infrastructure Integrity

The site sits behind Cloudflare CDN/WAF protection. All four observed addresses are edge nodes, and the origin server was not observable. This is a mitigating factor only. Edge-only visibility prevents independent verification of the true hosting and can mask rapid content changes behind a stable front. Such protective infrastructure cannot offset the reputational risk and does not indicate legitimacy.

Closing Assessment

The site should not be used for account login, credential entry, wallet or payment interactions, or any financial activity, and nothing should be downloaded from it. Any contact should be limited to passive viewing from an isolated environment. A reassessment is warranted only once the external listings are cleared and the operator is independently identified.