Is pumpfunsolstreamers.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at pumpfunsolstreamers.xyz has a domain name that combines a well-known Solana token-launch platform's name with the idea of livestreamers, which implies a crypto-community or streaming-themed property. In the analysis, the homepage returned only a bot-verification interstitial instead of substantive content, so no products, pages or stated business model could be observed. The site's apparent purpose is therefore inferred from its name alone, and the domain is very newly registered.

Scam/Impersonation Risk

Contradictory signals are present, and they are decisive. Multiple independent security vendors currently flag the domain as malicious, and the combined detections are strong enough to meet the threshold for a confirmed blacklist listing. This outweighs every neutral or favourable technical attribute. No conflicting legal identities and no confirmed brand-impersonation or phishing finding were recorded. The domain name does embed a recognisable third-party platform brand alongside a crypto-community theme. That is a naming pattern commonly used to borrow credibility, and it sits alongside the blacklist listing. The behavioural analysis found no wallet-drainer activity, no clipboard manipulation, no hidden forms and no credential forms posting to external destinations. This is reassuring but limited. The challenge page that gated the content means deeper interactive functionality was not exercised. The pages showed a very high share of traffic going to external endpoints, with many third-party background requests and POSTs, plus repeated console errors. This is unusual for a site that shows only an interstitial. The behaviour is consistent with the elevated-risk assessment but does not prove malice on its own. Evidence:

• Homepage: security vendors returned 15 malicious and 3 suspicious verdicts for the domain, and an external blacklist listing is active.
• Domain registration: registered 2026-08-25 (~0.17 years old, about two months), well inside the period in which newly created domains are most often abused.
• Web archive: 1 snapshot, first and last seen 2026-09-02 (1 year tracked), so there is no meaningful operating history.
• Homepage behaviour: 27 external background requests and 9 external POSTs across three runs, with 9 console errors, and no wallet-drainer or clipboard-hijack activity.

Regulatory Verification Notes

The captured pages contain no legal, licensing or corporate-identity content that could be assessed. The only content captured was a verification interstitial, so no operator name, registration number or terms of service could be examined. No regulator or third-party reputation source links the domain to a licensed or recognised operator, and no broker-reputation record matched. This leaves the site without any independent footing for legitimacy. It is a verification gap, but the blacklist listing, not the missing disclosures, is what drives the cautionary posture. The standard transport encryption is a basic hygiene signal only. A domain-validated certificate confirms control of the domain, not the identity or intent of the operator. Evidence:

• Registrar: Global Domain Group LLC, registration running to 2027-08-25.
• TLS: certificate issued by WE1 (DV), valid to 2027-01-21, with about 87 days remaining at the time of analysis. This confirms domain control only.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Homepage: the captured page title was the interstitial text "Just a moment...", with no legal or about content.

What to Verify Next

Before any engagement, confirm through the official channels of the platform whose name appears in the domain whether this domain is an authorised property. If no such confirmation exists, the domain should be treated as unaffiliated. If the domain is encountered through a link, advertisement, social post or stream overlay, trace that link to its origin and check whether it was promoted by an unverified account. Re-check the domain's reputation only after a substantial interval and a documented clean-up. Until then, nothing should be downloaded from it. Evidence:

• Domain name: it embeds a third-party platform brand and a livestreamer theme, which is the claim an official source would need to confirm.
• Reputation: current security-vendor detections are active on the domain, so a clean re-scan is the only basis for lifting the caution.
• Homepage: no stated operator or contact route could be observed to support any independent confirmation.

Summary Verdict

The overall posture is high-risk and cautionary. Active adverse security-vendor listings, a very recently created domain with no operating history, and no independent evidence of a recognisable operator converge on a clearly negative assessment. The favourable technical attributes are routine, cannot be treated as proof of legitimacy, and do not offset the reputational findings. The real-world operator identity remains unverified.

Infrastructure Integrity

The site sits behind a major CDN and WAF provider (Cloudflare), and all four observed addresses are edge servers. Bot protection was active during the analysis. This is a mitigating factor, because it shows ordinary hosting hygiene and a valid certificate chain. It is not proof of legitimacy, since such services are available to any customer. Edge-only visibility also means the hosting origin could not be independently observed, and content behind the edge can change quickly without visible hosting changes. The infrastructure heuristics noted a young domain with sparse subdomains. This is an unconfirmed indicator and is consistent with the domain's recent creation.

Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction. At most, it should be viewed read-only, and nothing should be downloaded from it. If it was reached through an unsolicited message or link, that source should be treated as suspect and reported.