Is pumpfunlivestream.pro a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page site registered under the domain name pumpfunlivestream.pro, whose page title reads "Pump.fun". The domain combines the name of a well-known crypto token-launch platform with the word "livestream", and the page presents itself under that platform's name. Its apparent purpose is to appear as, or alongside, that brand's service. The captured page carries only a short body of text, and the analysis could not independently connect the site to any real-world operator.

Scam/Impersonation Risk

Contradictory signals are present, and they dominate the assessment. Several major security vendors currently flag the domain as malicious, and a wider set of engines flags it as suspicious. This amounts to a confirmed blacklist listing, and it is decisive. The risk is compounded by the domain's age. It was registered only weeks ago, and its web-archive footprint is thin and recent. A brand-derived domain name that presents itself under a popular crypto platform's title, on a newly created domain, is a recognised pattern for lookalike and wallet-targeting campaigns. No conflicting legal entities were observed, so there is no identity contradiction in the narrow sense. The site was also observed to make no third-party network calls, to show no wallet-connection or clipboard-manipulation behaviour, and to show no content cloaking during sandbox interaction. These are mitigating observations about the current page state. They do not offset the external detections, and a page can be swapped quickly after a reputation is built. Any claim by the site to be affiliated with the platform it names is unverified. Evidence:

• Homepage: the page title presents the site as "Pump.fun" while the domain is a different, brand-derived name.
• Reputation: 12 engines rated the domain malicious and 4 rated it suspicious, including three tier-one security vendors, and the external blacklist condition is active.
• Domain provenance: registered 2026-08-28 (~0.16 years, about 58 days old).
• Archive depth: 3 archive snapshots spanning 2026-09-03 to 2026-09-21 (1 year tracked).
• Sandbox: 3 of 3 runs succeeded, with no external requests, no wallet-provider activity, and no cloaking.

Regulatory Verification Notes

The site discloses no licence, registration, or legal-entity details in the captured content, and the on-page disclosure state is unclear. This is a verification gap, not proof of wrongdoing, but it gives no counterweight to the reputational findings above. Ownership is opaque, because the registration record gives no complete owner identity. The domain was registered through NICENIC International Group Co., Limited, and nothing links the registrant to the brand the page displays. The transport-encryption certificate is valid, but it is only domain-validated. It shows control of the domain, not the identity or legitimacy of the operator. No third-party broker-reputation match was found, which means there is no additional signal either way. It does not clear the site. Evidence:

• Homepage: no company name, licence number, or regulator reference appears in the captured text.
• Registration record: registrar NICENIC International Group Co., Limited, with incomplete owner details; expires 2027-08-28.
• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-11-30.
• DeFi directories: the domain is not listed in the DeFi protocol directory consulted.

What to Verify Next

Before any engagement, confirm through the genuine platform's own officially published channels, reached independently of this site, whether this domain is an authorised property. If it is not, the page should be treated as an unaffiliated lookalike. Wallets, seed phrases, and credentials should not be entered or connected on this site while the active threat detections stand. Re-check the domain's reputation across multiple independent security sources after any remediation claim. If the site is encountered through a link in a social post, message, or advertisement, that referral channel should be reported and treated as untrusted. Confirm the official support and contact channels through an offline route. Evidence:

• Homepage: it uses the platform's name as its page title, which makes brand authorisation the first point to confirm.
• Registration record: the domain was created 2026-08-28, so no long operating history exists to rely on.
• Reputation: 12 malicious and 4 suspicious engine verdicts are currently active.

Summary Verdict

The available evidence supports a high-risk, clearly cautionary posture. Active external threat detections combine with a very young, brand-derived domain and an unidentified operator. The absence of overtly malicious on-page behaviour in the sandbox does not change that conclusion. Read-only observation is the only use consistent with the evidence. The site is not appropriate for login, credential, wallet, or financial interactions.

Infrastructure Integrity

The site resolves entirely to Cloudflare edge addresses under AS13335 (registry ARIN, US), and no origin server address was observable. The mix of IPv4 and IPv6 edge addresses is typical of a standard CDN/WAF deployment. The protection is a mitigating factor only. It makes independent verification of the real hosting harder and can mask rapid content changes. It cannot offset the reputation findings.

Closing Assessment

Do not log in, connect a wallet, or transfer funds through this site. If it was reached through a link claiming to be the official platform, abandon that link and navigate to the genuine service by a manually typed, independently confirmed address.