Is livesolstreamers.xyz a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at livesolstreamers.xyz is a very recently registered site whose single captured page carries the title "Pump" and presents a short text-based front page. The domain name points to a live-streaming and Solana-themed offering. Because the page content could not be independently classified, its exact purpose and business model cannot be confirmed from the evidence. What can be confirmed is that it is a newly established web property with no independently verified operator behind it.

Scam/Impersonation Risk

The dominant finding is a confirmed blacklist-level reputation problem. Fourteen engines in an aggregated multi-engine reputation scan classify the domain as malicious and a further four as suspicious, and three tier-one security vendors are among those flagging it. A secondary blacklist indicator corroborates the same conclusion. Detection at this level is decisive. The deterministic assessment treats it as an external kill-switch condition that no positive technical signal can offset. The detections are not attributed to a specific threat type, so the nature of the abuse (malware delivery, credential capture, or deceptive promotion) is unresolved. No brand impersonation and no conflicting legal identities were observed, but the absence of those two contradictions does not soften the blacklist outcome. Behavioural testing of the homepage found no outbound data submission, wallet-connection attempts, clipboard manipulation, hidden forms or fingerprinting. That is a mitigating observation about the captured page only. It does not explain or cancel the external detections, which may reflect content served to other visitors or sessions. The domain's extreme youth, combined with a fast-flux-like DNS profile and short-lived resolution behaviour, fits the pattern of disposable infrastructure commonly used for short-run abuse. Evidence:

• Homepage and domain-level reputation: 14 malicious and 4 suspicious engine detections, including three tier-one vendors, plus a corroborating secondary blacklist hit.
• Domain registered 2026-08-25 (~0.17 years old), roughly two months before analysis.
• Web archive holds only 3 snapshots, spanning 2026-09-02 to 2026-10-12 (1 year tracked), so there is no meaningful history to offset the detections.
• Behavioural sandbox on the homepage: 3 of 3 runs completed, zero external XHR or POST traffic, and 18 console errors.

Regulatory Verification Notes

The captured page shows no legal-entity name, licence, registration number or governance disclosure, and operator identity could not be independently connected to any real-world person or organisation. WHOIS ownership details are incomplete, which is a case of ownership opacity. It is not an identity contradiction, since no competing legal names appear. No third-party broker or regulatory-database record matched this domain, and no regulator listing supports it. The site therefore has no independent regulatory standing to weigh against the reputation findings. Any financial, trading or token-related activity it may host cannot be treated as supervised. Evidence:

• Homepage content: no company name, licence reference or legal-entity disclosure was found.
• Registered through Global Domain Group LLC, with registration valid to 2027-08-25 (one-year term).
• Broker-reputation database lookup returned no match for the domain.

What to Verify Next

Any engagement should begin by treating the domain as unsafe until the detections are resolved. The first step is to check the current status of the domain with the individual security vendors that flagged it, to see whether the listings are still active or have been remediated. Anyone who reached this site through a link, message or advertisement should trace that referral to its source and confirm through an independent, offline route that the sender actually operates this domain. Any claimed operator should be asked to name a legal entity and supply licensing evidence that can be checked directly in the relevant registry, not through links on the site. Official contact and support channels should be confirmed independently of the site. Evidence:

• Reputation listings were active at the time of analysis and carry the most weight in the assessment.
• Homepage provides no verifiable entity or licensing details to check against a registry.
• Archive and registration data show a site that is only weeks old and has no established record.

Summary Verdict

The overall posture is high risk. Active, multi-source security detections dominate the assessment, and the site's novelty and lack of verifiable identity give no counterweight. Basic technical hygiene is present, but it is the baseline expected of even disposable sites and does not indicate legitimacy. The site is classified as unsuitable for sensitive interaction.

Infrastructure Integrity

The site is served behind Cloudflare's CDN and WAF, with all four observed addresses being Cloudflare edge servers in the United States on AS13335. The origin server could not be observed. The transport certificate is a domain-validated one issued by WE1, valid to 2027-01-21. Cloudflare's bot protection was also detected during behavioural testing. This is a mitigating factor only. Edge-only visibility prevents independent hosting verification and can mask rapid content swaps, and shared protective infrastructure cannot offset the reputation findings. A valid certificate confirms only an encrypted connection, not the operator's trustworthiness.

Closing Assessment

Read-only viewing of the page is the only use that fits this assessment. Logging in, entering credentials, connecting a wallet and any payment or transfer should be avoided entirely. Nothing should be downloaded from the site until the external detections are cleared and an accountable operator is identified.