Is pumpfunsolana.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page landing site on the domain pumpfunsolana.live. Its browser title is simply "Pump", and its domain name combines wording associated with the Solana token-trading ecosystem. The captured homepage carries a modest amount of text, and no specific products, yield figures, leverage multiples or named tokens could be extracted from it. Its apparent purpose is to present itself as a Solana-related crypto trading or token platform. That positioning rests on the domain name and title alone, and the operator behind it is unidentified.

Scam/Impersonation Risk

The domain is currently blacklisted: multiple independent threat-intelligence engines flag it, and a leading security vendor is among them. Two engines classify it as malicious and several more as suspicious. This is a confirmed, externally corroborated reputational contradiction, and it is the decisive factor in this assessment. No conflicting legal identities and no confirmed brand impersonation were observed, so the contradiction rests on the blacklist alone. The domain name does borrow terminology from a well-known crypto ecosystem. That is a recognised pattern in lookalike and token-lure campaigns, but it is not by itself proof of impersonation. The browser-behaviour testing did not observe wallet-connection prompts, wallet-draining routines, clipboard manipulation, hidden forms, credential forms posting to outside parties, or page cloaking. This absence is worth recording, but it does not offset the blacklisting, because malicious behaviour on crypto-themed sites is often delivered conditionally or after a content swap. The homepage also produced a high number of script errors during testing, which indicates an unpolished or hastily assembled build rather than a maintained product. Evidence:

• Homepage and domain reputation: two security engines rate the domain malicious and four rate it suspicious, with one leading vendor among the flagging sources.
• Domain registration: registered on 2026-08-26 (~0.15 years, about two months old), a very young domain for a site presenting itself as a trading platform.
• Web-archive depth: only 2 archive snapshots, both from 2026-10-13 and 2026-10-14 (1 year tracked), so there is no meaningful operating history.
• Homepage behaviour testing: 15 console errors across 3 successful runs, with no wallet-connect, drainer, clipboard-write or cloaking activity detected.

Regulatory Verification Notes

No regulatory registration, financial licence or authorised-entity listing is associated with this site, and no third-party broker reputation record matched it. For a site that appears to operate in crypto trading, that leaves nothing to substantiate any claim to lawful financial activity. This is a verification limitation. The blacklisting, not the missing licence, is what drives the cautionary posture. The site's TLS certificate is valid and issued by a recognised authority, but it is domain-validated only. It confirms an encrypted connection and says nothing about who operates the site or whether it is legitimate. The registration was made through an offshore-based registrar. Evidence:

• Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED, with registration running to 2027-08-26.
• Transport encryption: TLS certificate issued by WE1 (DV validation), valid to 2026-11-26, with about 35 days remaining.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Third-party records: no matching regulatory or broker-reputation entry was found for the domain.

What to Verify Next

Do not use the site for any account, wallet or payment activity unless an independent party can first establish who operates it. Any connection to an established Solana platform should be tested by reaching that platform through channels already known and trusted, such as official social profiles or documentation, not through links on this site. Any claimed licence or registration should be checked directly with the relevant financial regulator's public register. If the site is internal to an organisation's own systems, the security team should treat the domain as flagged and review any logs for prior visits. Official support and contact channels should be confirmed through an independent route before any communication. Evidence:

• Domain age and archive record show a site only weeks old with essentially no history, so there is no track record to rely on.
• Homepage title and domain wording suggest an association with a known ecosystem, which should be checked against that ecosystem's official channels.
• Reputation findings are current as of this assessment and may change if the site is cleaned or taken down.

Summary Verdict

The available evidence supports an elevated-risk, clearly cautionary posture. A confirmed external blacklisting is not offset by the site's technically sound basics, its lack of observed malicious in-browser behaviour, or its very recent creation. The operator remains unidentified, and the apparent legitimacy of the site is not established by any evidence reviewed.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and web application firewall, and every observed address is a Cloudflare edge address. The real origin server is not visible. This is a mitigating factor only: it shows no direct hosting abuse, but it also prevents independent verification of where the content is hosted. It does not reduce the reputational risk, because protective infrastructure can front legitimate and malicious sites alike and allows content to be swapped quickly.

Closing Assessment

The site should be treated as unsafe for logging in, entering credentials, connecting a wallet or making any financial transaction. At most, it can be viewed passively, ideally from an isolated environment. Anyone who has already interacted with it should review any wallet permissions and change any reused credentials.