Is pumpfunsol.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents a single landing page titled "pump.fun" on the domain pumpfunsol.live, which is a different domain from the brand its title uses. The page carries only a small amount of text and appears to be a front-end for a Solana token-launch or trading platform. Its apparent purpose is to draw visitors into interacting with a crypto-asset service under a well-known platform name.

Scam/Impersonation Risk

The evidence converges on a hard, multi-source reputational contradiction. Several tier-one security vendors independently classify the domain as malicious, and a larger group of engines flags it as malicious or suspicious. This is a confirmed blacklist-level condition, and it is decisive for the posture of this report. The behavioral sandbox also recorded suspected cloaking: the page's content and structure changed materially after simulated user interaction. A site that shows different material to different visitors, or after engagement, is a recognized evasion pattern. Its own title presents the well-known "pump.fun" brand under a look-alike domain, and the page carries no independent signal that connects it to the operator of that brand. No conflicting legal entities were found, because the page offers no legal identity at all. The sandbox also recorded a high share of external resource loading and a notable number of client-side console errors. These are consistent with a hastily assembled or templated page, but they are secondary to the blacklist findings. Evidence:

• Homepage: the page title presents the pump.fun brand, while the domain is pumpfunsol.live.
• Homepage behavioral capture: three successful sandbox runs showed content changes after interaction, which were classified as suspected cloaking.
• Reputation review: multiple security engines, including three tier-one vendors, flagged the domain as malicious.
• Provenance: the domain was registered on 2026-08-10 (~0.21 years old). The web archive holds 1 snapshot, captured 2026-10-10 (1 year tracked).

Regulatory Verification Notes

The captured homepage discloses no company name, licence, registration number, terms of service or other governance material. Operator identity is therefore not independently verified, and the registration record gives no clear owner to anchor responsibility. Apparent use of a recognized platform's name does not establish any regulatory standing or affiliation. No third-party broker or regulator record matches this site. The absence of a match is neutral, so it neither supports nor weakens legitimacy. In a financial or token-trading context, these disclosure gaps leave a user without any accountable counterparty. The valid certificate is a baseline transport-security measure only and says nothing about who operates the site. Evidence:

• Homepage: no legal entity, licence, jurisdiction or terms page was visible in the captured content.
• Registration: registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with expiry on 2027-08-10 and an incomplete owner record.
• Transport security: the TLS certificate was issued by WE1 (DV, domain-validated only) and is valid to 2027-01-07.
• Hosting: the site is served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any dealing with this site should begin from the official channels of the genuine platform, not from this domain. The correct domain, social accounts and app listings should be confirmed through the brand's own independently sourced publications. A prospective user should check whether the genuine operator recognizes this domain as its own, and should report it to that operator if it does not. Any wallet connection, token purchase or credential entry should be treated as out of scope until that confirmation is obtained. A technical team can re-test the site in an isolated environment to see whether the post-interaction content changes recur. Organizations may also wish to submit the domain to their internal blocklist and abuse-reporting processes. Evidence:

• Reputation review: the malicious classifications are current and come from several independent sources.
• Homepage: the brand name and domain do not match, which makes confirmation with the genuine operator necessary.
• Behavioral capture: the cloaking classification came from comparing post-interaction page states.

Summary Verdict

The site sits in the critical-risk tier. Strong, multi-source threat classifications, suspected content cloaking, a very recent domain and a brand-lookalike presentation all point the same way. The positive technical hygiene on record is routine and cannot offset the reputational evidence. The posture is cautionary and security-forward.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF. All observed addresses are shared edge nodes and the origin host was not visible, so the actual hosting location cannot be verified independently. This arrangement also makes it harder to detect rapid content swaps. The protection and the valid certificate are mitigating factors only. They do not offset the external threat detections, and mainstream infrastructure here is not evidence of legitimacy.

Closing Assessment

The site should be treated as unsafe for login, credential entry, wallet connection or any financial interaction, and should be kept to passive, read-only viewing at most. Organizations should consider blocking it and reporting it to the abuse contacts of the brand it appears to imitate.