Is pump-coin-live.fun a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a Solana memecoin trading and livestream page presented under the Pump branding. It shows a live price chart, a market-cap and volume ticker, a stream viewer count, a community chat and a trade widget that requires a connected crypto wallet. Its apparent business model is a memecoin launchpad and trading venue that earns platform fees on speculative token buying and selling, with user returns depending entirely on short-term price movement.

Scam/Impersonation Risk

Contradictory signals are present, and they support a clearly cautionary reading. Multiple independent threat-intelligence engines, including two major security vendors, currently flag the domain as malicious, and the combined reputation picture amounts to a confirmed blacklisting. The domain was registered only days before the assessment, so it has no reputational track record to offset these detections. Brand impersonation was not positively established. The page nonetheless presents itself under an established platform's name on a different domain, and no evidence connects the two.

The homepage supplies the substance behind the concern. It promotes a single token (contract address ending in "pump") with a market capitalisation of roughly $170 thousand and about $2.2 million in 24-hour volume. A "buy" action sits next to a chat dominated by urgency and coordinated promotion. Examples include "buy buy buy", "Guys raid community on X asap!" and "someone just put in 85 Sol". The chat is multilingual, with near-identical hype messages in French, Spanish, Turkish and Chinese. That pattern fits manufactured momentum, and the page shows no token verification, team, or liquidity disclosure behind it. Funds must be committed through a wallet before any service or return exists, and the page gives no way to trace where that value goes. In sandbox testing, the page made no external data posts, showed no wallet-drainer or clipboard-hijack behaviour, and did not cloak its content. These results lower the likelihood of automated theft but do not offset the reputational and structural risk.

Regulatory Verification Notes

The captured homepage names no operating company, jurisdiction, licence or registration, and it carries no visible terms, risk disclosure or legal-identity page. These are content gaps on the site itself, and the operator's ownership is opaque. This is a transparency shortfall and is not a contradiction of identity, because no conflicting legal entities appear. The footer references "Fees" and "Revenue" but gives no disclosed basis for what users are charged or how value is distributed. Real-world operator identity remains unverified, so nothing on the page can be treated as evidence that a regulated or accountable party stands behind the trading activity. No third-party broker reputation record was matched.

What to Verify Next

Before any engagement, anyone considering this site should reach the genuine Pump platform only through an independently sourced address, such as a bookmark made earlier or an official channel confirmed offline. They should not follow links from this domain. The token should be examined on an independent public blockchain explorer for holder concentration, liquidity depth and creator or mint privileges. The operator should be checked against the relevant financial-services and corporate registries. The official support and contact channels should be confirmed through an independent route.

Summary Verdict

The assessment is critical. Confirmed external threat detections, a brand-new domain, and an unverifiable, speculative, wallet-funded trading model converge on a high-risk posture. The site's operator remains unidentified, and the evidence provides no counterweight that would support treating it as legitimate.

Infrastructure Integrity

The site is delivered through Cloudflare's CDN and web application firewall. All four observed addresses are edge servers, and the origin server is not visible. The TLS certificate is valid. This is a mild mitigating factor only: it shows competent delivery infrastructure, but it says nothing about who operates the site. Because the origin is not visible, hosting cannot be independently verified, and content could be swapped quickly. It cannot offset the active threat detections. The domain's young age and sparse subdomain footprint are unconfirmed heuristic observations and carry little weight.

Closing Assessment

The site should be treated as read-only at most. Wallets should not be connected, no credentials entered, and no funds committed. Anyone who has already interacted with the site should disconnect and revoke any wallet permissions granted. They should then move remaining assets to a fresh wallet.