Is livesolstreamings.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a newly established domain on the .xyz extension. Its homepage carries only the bare title "Pump", which has no obvious connection to the streaming-themed wording in the domain name. It sits behind automated bot-screening that the visitor must pass. No clear operator branding, product description or business model could be established, so its apparent purpose is unconfirmed.

Scam/Impersonation Risk

Confirmed contradictory signals are present, and the site is blacklisted by external reputation sources. Several independent security engines currently classify the domain as malicious, and a larger group flags it as suspicious. Three major, widely deployed security vendors are among those flagging it. The volume and breadth of these detections is enough on its own to place the site in the highest-concern category. Web-archive records also carry a prior phishing association for this domain. No conflicting legal-entity names were found, and no specific brand impersonation was identified. The risk therefore comes from the external threat reputation, not from identity inconsistencies on the pages. The domain was registered only weeks ago, so there is no history of benign operation to offset these detections. The homepage title of "Pump" is generic and does not match the name the domain presents. That is a weak branding signal, but it adds nothing in the site's favour. Evidence:

• Homepage and domain-level reputation: multiple security engines report the domain as malicious and several more as suspicious, including three leading vendors. An automatic safety override was triggered by the size of the detection count.
• Provenance: the domain was registered on 2026-08-26 (~0.16 years old), about two months before this assessment.
• Archive records: 88 snapshots, all from 2026 (first seen 2026-08-31, last seen 2026-10-17; 1 year tracked), which means no prior history.
• Homepage content: the page title is only "Pump", with no operator name or product description visible in the captured text.

Regulatory Verification Notes

No licensing, registration or regulator reference could be matched to this site, and no third-party broker or regulatory-database entry exists for it. On-site disclosure of the operating entity is unclear. This is a verification gap and is not evidence of fraud in itself. The elevated posture stems from the external threat detections, not from the absence of a license. The site's hosting address and transport encryption are technically sound, but they are the baseline for any internet service and do not offset the reputation findings. Evidence:

• Legal and identity pages: no operating entity, registration number or regulatory status could be established from the captured content.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 at domain-validation (DV) level only, valid to 2027-01-23. DV confirms control of the domain and says nothing about who operates it.
• Domain registration is through Global Domain Group LLC, with an expiry of 2027-08-26.

What to Verify Next

The site should not be treated as safe for any sensitive interaction until the external detections are cleared. A prospective user should check the domain against several independent reputation services and read each engine's stated detection category. The reported category (malware, phishing or other) shows whether the site was set up for abuse or has been compromised. Anyone who believes they were directed here by a third party should confirm the link's origin through an independent, offline channel. The official support channels of any brand the site claims to represent should be confirmed in the same way. Operator identity and any claimed licence should be checked directly with the relevant registry before any engagement. Evidence:

• Homepage: the title "Pump" does not tell a visitor which service is meant, so the claimed service must be confirmed independently.
• External reputation: the detection pattern is consistent across engines, so a single independent re-scan is a reasonable first check.
• Domain age: the registration is under three months old, which makes independent corroboration of the operator more important.

Summary Verdict

The overall posture is clearly cautionary and high-risk. External threat intelligence and a very recent registration, with no history of legitimate operation, converge on an assessment the site's technical hygiene cannot overturn. The evidence does not support treating this site as legitimate, and its identity is unverified.

Infrastructure Integrity

The site is delivered through Cloudflare's content-delivery and web-application-firewall network. All observed addresses are shared edge servers, and the origin host was not observable. This is protective and mitigating, and it passes the automated bot-screening step. It also prevents independent hosting verification and can mask rapid content changes. It is a weak mitigating factor only and does not establish legitimacy. An unconfirmed heuristic notes the combination of a young domain and sparse subdomains. It is secondary to the reputation findings.

Closing Assessment

Read-only viewing is the most that should be considered. No login, credential entry, wallet connection or payment should take place, and no file should be downloaded, unless the external detections are formally cleared and the operator is independently confirmed.