Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pumpfunsecuingnow.xyz shows high-risk / scam indicators.
| What this site appears to be | The page presents itself as a wallet 'entry point' for dApps, but its main actions are wallet connections for token claims, airdrops, rewards, recovery, KYC and transaction rectification. It gives no verifiable operator identity, contact details, or audit or insurance evidence. The pattern is consistent with wallet-drainer or fake recovery and airdrop lures, so users should not connect a wallet here. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 22 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website is a crypto "wallet connection" landing page. It presents itself as an open protocol and "entry point" for connecting a wallet to any decentralized application. Its page title reads FaucetNodes, while the body copy names a service called MainnetSync. Almost every element on the page is a "Connect" button attached to a different lure: a token presale, "Validate Your Wallet", transaction "Rectification", "Claim Token", "Claim Reward", buying and selling, and swap/exchange support. Its apparent business model is to move visitors into wallet-approval flows, with no stated operator, fee structure or custody model.
Scam/Impersonation Risk
The site carries confirmed adverse external reputation. It is blacklisted by an external threat-intelligence source, and the same intelligence shows additional engines flagging it as malicious or suspicious. This is a decisive negative signal, and it is reinforced by the page's own behavior. The homepage offers a "Claim Token" button ("Kindly click here to claim your token"). It offers a "Claim Reward" button that promises rewards to anyone who "holds any token in your wallet". It also offers a "Rectify unwanted transactions, smart contract or other issues" function and a "Validate Your Wallet Here" prompt. Each of these resolves to the same wallet-connection action. This is the typical structure of wallet-drainer and fake recovery or airdrop lures. Unsolicited "eligibility" for rewards and promises to reverse transactions are techniques used to coax a victim into signing approvals that grant access to funds. The page also claims audits, insurance and "$1M in trades", but supplies no report, insurer or verifiable record to support any of them. The page title and the body-copy brand do not match, which further weakens any claim of a coherent product. The automated browsing sessions did not trigger an actual wallet-draining action, so the risk rests on the page's design and the external detections, not on an observed theft. No impersonation of a specific known brand was detected, and no conflicting legal identities appear.
- Homepage: repeated "Connect" actions for claim, reward, validation, rectification and recovery, with no explanation of what permissions a wallet owner would grant.
- Homepage: the audit, insurance and "$1M in trades" assertions appear with no supporting documentation or named auditor.
- Domain registered 2026-09-29, roughly three weeks old (~0.06 years) at the time of analysis.
- Web archive shows only 3 snapshots, all in 2026 (2026-09-29 to 2026-10-09), so there is no meaningful operating history.
Regulatory Verification Notes
The homepage names no operating company, registered address, licensing authority or registration number. It also has no terms, privacy or contact page that would identify who controls the funds-handling functions it advertises (staking rewards, swaps, buying and selling, "KYC"). The page invites KYC and financial activity without any regulatory standing. The site's own legal and contact status cannot be verified from the page. No third-party broker or regulator record matches the site, and this absence is not by itself a finding. The registration was made through NICENIC International Group Co., Limited, with ownership details incomplete, which reinforces the lack of accountable ownership. A valid but entry-level certificate and mainstream hosting are present. They show only that the site is technically reachable and encrypted, not that it is legitimate or safe.
- Homepage: no company name, jurisdiction, license or registration number is displayed alongside the KYC, staking and exchange claims.
- Registrar: NICENIC International Group Co., Limited; registration expires 2027-09-29.
- TLS certificate issued by YE2, domain-validated (DV), valid to 2026-12-28 (68 days remaining at analysis).
- Served from AS13335 (Cloudflare, Inc., US).
What to Verify Next
Any reader who has already interacted with the site should treat it as a potential compromise event and not as a service to be validated. The first step is to check the connected wallet's active token approvals and permissions with an independent approval-review tool and revoke any that were granted to unfamiliar contracts. The second is to move remaining assets to a freshly created wallet if any signing prompt was accepted. The third is to confirm the identity of any project that claims to offer an airdrop or recovery service only through channels reached independently of this site, such as the official project channels reached by a separate route. An organization that wants a formal determination should report the site to its hosting and registrar abuse desks and to its security team.
- Homepage: "Claim Token", "Claim Reward" and "Rectification" actions all route to wallet connection, which makes approval review the most relevant check.
- Homepage: no operator, contact route or license is published, so no on-site channel can be used to verify anything.
- Behavioral analysis: the page repeatedly raised wallet-connection prompts across multiple sessions.
Summary Verdict
The assessment is critical and clearly adverse. Confirmed external blacklisting converges with a purpose-built wallet-connection funnel, unsupported audit and insurance claims, a newly created domain, and an absence of any accountable operator. Sensitive interaction on this site carries a high risk of financial loss. The site's technical hygiene does not offset that.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are CDN edge addresses. The real origin server is not visible, so hosting cannot be independently confirmed. This protective layer is a mitigating factor only. It does not alter the adverse reputation findings, and it can obscure rapid changes to the content served. The young domain with sparse subdomains is a minor unconfirmed heuristic and adds no independent weight.
Closing Assessment
Do not connect a wallet, sign any message or transaction, submit credentials, or complete any "KYC", "claim" or "recovery" step on this site. Viewing the page in an isolated environment is the only use consistent with the findings.
Written analysis generated 2026-10-21 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, several checks together, hosting and network.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Page content
- The review of the page content rated it high risk.Page content
rule:PAGE_RISK_HIGH - The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG
03 Several checks together
- Several independent checks pointed to risk at the same time.Several checks together
rule:HYB_MULTIPLE_MODULES_HIGH_RISK
04 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pumpfunsecuingnow.xyz.
- The request stayed on pumpfunsecuingnow.xyz. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-29. Noted
- The earliest public archive of this site is from 2026-09-29. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3035::6815:401b |
| Name servers | BOYD.NS.CLOUDFLARE.COM, KIM.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-28 |
| Domain age | 0.06 years (continuous registration) |
| Domain expiry | 2027-09-29 |
| Archive first seen | 2026-09-29 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pumpfunsecuingnow.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.