Is pumps-live.fun a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The domain pumps-live.fun is a very recently registered website whose name points to a live token-trading or "pump"-style crypto theme. In the analysis, the only page returned to a visitor was a security interstitial headed "Suspected Phishing" rather than any site-authored content. No products, pricing or business model were therefore captured, and the site's purpose can only be inferred from its name and its reputation footprint.

Scam/Impersonation Risk

This is a confirmed high-risk case. Multiple major security vendors currently flag the domain as malicious, and the site is therefore treated as blacklisted. Three of the most widely relied-upon vendors are among the flagging parties, and the volume of detections is large enough to trigger the strictest reputation safeguard. The page served to the analysis browser was itself a phishing warning, which aligns with these detections. No brand impersonation and no conflicting legal identities were observed, so the risk rests on the blacklisting and phishing indicators rather than on identity inconsistencies. Browser behavior in the sandbox adds secondary context. Nearly all network traffic went to external destinations, with many outbound background requests and several outbound data submissions. The pages produced a large burst of page-structure changes after interaction and a high rate of script errors. No wallet-draining, clipboard-hijacking, hidden-form or external password-submission behavior was detected. The domain was registered only weeks ago, a profile that fits disposable campaign infrastructure and leaves no track record to offset the detections. Evidence:

• Homepage: the captured page was a phishing-warning interstitial (HTTP 403 with a bot challenge) and contained only a short block of text.
• Reputation: 12 engines rated the domain malicious and 1 suspicious, with 3 top-tier vendors among them (Fortinet, Kaspersky and Sophos). Safe Browsing did not flag it.
• Domain provenance: registered 2026-09-07 (~0.12 years, about 45 days old).
• Sandbox behavior: 71 external XHR/fetch requests, 9 external POSTs and 28 console errors across 3 runs, with a peak of 1,518 DOM mutations after interaction.

Regulatory Verification Notes

No licensing, registration or legal-entity information could be assessed. The only page captured was the security interstitial, so no terms, privacy, about or contact content was available. Whether the operator discloses a company name or a regulator-issued license is therefore undetermined. Real-world operator identity remains unverified, and no third-party broker or regulatory-database match exists for this name. Nothing in the evidence supports any regulated status. The technical hygiene signals are routine and do not offset the reputation findings. A valid, mainstream DV-grade certificate and a reputable corporate registrar are available to any registrant, including the operators of phishing infrastructure. Evidence:

• Registrar: NameSilo, LLC. Registration runs from 2026-09-07 to 2027-09-07, with registrant details held behind a privacy service.
• Transport security: TLS certificate issued by WE1 (DV level), valid to 2026-12-06 with about 44 days remaining.
• Hosting: served from AS13335 (CLOUDFLARENET, Cloudflare, Inc., US).
• No external broker-database entry matched this site, so no broker-level reputational context exists.

What to Verify Next

The site should not be treated as a candidate for engagement, and verification is aimed at confirming the warning rather than clearing the domain. Anyone who already visited should check whether any wallet was connected or any credentials or seed phrase were entered. If so, wallet permissions should be revoked and the affected credentials rotated from a clean device. Any claim that links to this domain, such as a promotion, airdrop or trading invitation, should be validated through the official channel of the project it claims to represent, reached independently and not through the received link. Official support channels should likewise be confirmed through an offline route. Organizations should check whether the domain appears in mail, chat or proxy logs and block it at the perimeter until the detections clear. Evidence:

• Reputation: the domain remains under active malicious classification at the time of analysis.
• Homepage: the visitor-facing page is a phishing warning, not a verifiable business presentation.
• Age: the very recent registration offers no independent history for confirming legitimacy.

Summary Verdict

The overall posture is critical and clearly cautionary. Active security-vendor detections, a phishing-warning page and the absence of any established history converge on a site that should be considered hostile until proven otherwise. Positive technical hygiene does not alter this conclusion.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is a CDN edge address, so the origin server is not independently visible. This is a mitigating factor only. It shields the operator's hosting from direct inspection, so it provides no assurance about who runs the site or what it serves. Bot-protection challenges were encountered, which is a common feature of both legitimate and abusive deployments. An unconfirmed heuristic notes a young domain with sparse subdomain structure, and it carries little weight against the confirmed detections.

Closing Assessment

Do not log in, connect a wallet, enter credentials or make any payment on this domain. Treat any link or message that leads to it as hostile, and report it to the platform where it was received.