Is mygetnow.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page landing site titled "PUMP | Solana Meme Token". It presents itself as a Solana meme token project and shows visitors only a short block of promotional text. Its apparent purpose is to promote a speculative crypto token, probably to draw visitors toward token trading or participation.

Scam/Impersonation Risk

Hard contradictions are present, and this is the decisive finding of the assessment. The domain is blacklisted: multiple independent reputation engines rate it malicious or suspicious, and a tier-one security vendor flags it. The site's risk profile also includes a known-phishing association. No confirmed brand impersonation or conflicting legal identities were observed. The decision rests on the external threat detections, which the site's protective infrastructure and clean technical hygiene cannot offset. The domain was registered only a few months ago, and its title borrows the vocabulary of the Solana meme-token launch scene ("PUMP"). That combination is a common profile for short-lived token-promotion and wallet-targeting campaigns, where a fresh domain is stood up, promoted, and abandoned. In automated browsing runs the page made no external requests, attempted no wallet connection, and showed no clipboard manipulation, hidden forms, or cloaking. That is a mitigating observation about the captured page today. It does not show the page is safe, because content can be changed after the fact. The page offers few verifiable claims about the token, its team, or its mechanics. Evidence:

• Homepage: titled "PUMP | Solana Meme Token", with a short text body and no identifiable team, company, or product documentation.
• Reputation checks on the domain: three engines rated it malicious and two suspicious, including a flag from one tier-one vendor, and the site is listed on an external blacklist.
• Domain provenance: registered 2026-08-15 (about 0.2 years old, roughly 72 days).
• Behavioral sandbox: three successful runs recorded zero external network activity, zero wallet-connect attempts, and no wallet-drainer or clipboard-hijack behavior.

Regulatory Verification Notes

The captured page discloses no operating company, jurisdiction, licence, or registration details. The site also offers no terms or policy pages that would let a visitor identify who is responsible for the token. This is a disclosure gap and belongs in verification rather than being treated as proof of fraud. Ownership of the domain is not clearly attributable to an identifiable party, which is a limitation on attribution only. The registrar is Global Domain Group LLC. No third-party broker or regulator-style entry matched this site, so no outside reputational context exists beyond the threat detections above. Meme-token promotions of this kind generally sit outside regulated financial-service perimeters, and the site gives visitors no reason to assume investor protection. Evidence:

• Homepage: contains no legal entity name, licence number, regulator reference, or physical address.
• Domain registration: through Global Domain Group LLC, created 2026-08-15 and expiring 2027-08-15, a one-year term.
• Transport security: TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-11. DV confirms control of the domain, not the identity of its operator.

What to Verify Next

Treat any claim that the token is legitimate as unconfirmed until an independent source corroborates it. Check whether the project is documented through channels that exist independently of this domain, such as an established token directory, a verifiable on-chain contract address published by a recognized source, or an official social account with a long, consistent history. Confirm official support and contact channels through an independent route rather than links on this site. Re-check the domain's threat-intelligence status before any interaction, since cleaning or further flagging can change the outcome. Do not rely on the page's own wording for any claim about supply, audits, liquidity, or team. Evidence:

• Homepage: gives no contract address, audit reference, or named team to cross-check.
• Reputation checks: current detections come from multiple independent sources and need re-checking over time.
• Domain provenance: the domain is about 0.2 years old, so no long operating record supports any claim made on the page.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Confirmed third-party threat detections, together with a very recently created domain and a speculative-token theme, outweigh the technically clean behavior observed on the page. The site's identity and intent remain unconfirmed, and the available evidence does not support treating it as trustworthy.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF, and all observed addresses are Cloudflare edge servers on AS13335 (Cloudflare, Inc., US). The origin server was not observable. Edge-only visibility prevents independent verification of the true hosting location and can mask rapid content swaps. The Cloudflare infrastructure and valid TLS certificate are mitigating factors only. They are commonly used by legitimate and malicious sites alike and do not establish legitimacy.

Closing Assessment

The site should be limited to passive viewing only. It should not be used to log in, enter credentials, connect a wallet, sign transactions, or send funds or any financial information until the threat detections are cleared and an operator is independently verified.