Is tradepumpfun.live a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a pump.fun-style livestream and trading page for a Solana memecoin, shown on screen as "D4rY...pump". The page combines a live price chart, a 24-hour volume readout, a buy/sell panel that prompts for a wallet connection, and a busy community chat. Its apparent business model is to earn fees from speculative token trading settled in SOL. It does not describe any underlying product or service.

Scam/Impersonation Risk

The assessment carries confirmed, converging contradictions. The domain is currently flagged as malicious by a substantial cluster of independent security engines, including several leading endpoint-security vendors. This amounts to a confirmed blacklisting, and a prior phishing association is also recorded for the domain. The hostname is built around the name of a well-known memecoin launchpad, and the page imitates that platform's interface and branding. This is consistent with lookalike abuse, although a specific brand-impersonation finding was not confirmed. The page invites a high-stakes financial action. It shows a token with a market capitalisation of about $170K against roughly $2.2M of 24-hour volume, and it swung from +11% over five minutes to about -24% over one hour. Nothing on the page identifies a team, verifies the token contract, or discloses risk. The live chat reads as coordinated promotion. Messages include "buy buy buy", calls to "raid community on X asap", repeated "Dev respond please" pleas, and large-buy reports such as "someone just put in 85 Sol". They arrive in several languages in near-uniform, generic phrasing. That pattern is typical of manufactured momentum and gives a visitor no reliable evidence of genuine demand. No conflicting legal entities were observed, but the confirmed threat listings are decisive. Evidence:

• Homepage: a token trading panel and a wallet-connect prompt appear with no team identity, contract verification or risk warning.
• Homepage chat: coordinated-looking hype messages in multiple languages, including the "raid community on X" call, the 85 SOL buy report and unanswered "Dev respond please" requests.
• Domain registration: created 2026-09-14 (~0.1 years, about 36 days old).
• Web archive: 4 snapshots between 2026-09-14 and 2026-09-22, about 1 year tracked, so there is no established history.

Regulatory Verification Notes

The site claims no licence, registration or supervisory authority. No legal, terms, privacy or about page was captured to identify an operating entity, and no third-party broker or regulatory record matched the domain. The absence of a licence is a verification gap, not proof of wrongdoing on its own. For a platform that takes custody-adjacent trading actions, it is a material omission, and it adds to the threat-intelligence findings. The real-world operator is unverified, and the site's own claims cannot establish one. Technical hygiene is basic. The transport certificate is valid and issued by a recognised authority, but it is domain-validated only. That level of validation confirms control of the domain and says nothing about who operates it. Evidence:

• Homepage and navigation: no legal, terms, privacy or company-identity content was available, and no licence or registration number is stated.
• Transport encryption: TLS certificate issued by YE1 (DV), valid to 2026-12-13.
• Hosting: resolves to AS13335 (Cloudflare, Inc., US).
• Registration: domain registered through NICENIC International Group Co., Limited, with a one-year term expiring 2027-09-14.

What to Verify Next

Any wallet connection or funds transfer should be treated as unsupported by the evidence. Where a prospective user still wants to assess the token, the checks should be independent of this site. The user should confirm the token's mint address on the genuine launchpad by typing its address manually, not by following links from this site. The user should also review who holds the token supply and how concentrated the holdings are, using a neutral blockchain explorer. The user should check whether the claimed team or developer publishes verifiable identity through established channels. The user should also confirm official support and contact channels through an independent route. Evidence:

• Homepage: the token identifier is shown only in truncated form, so the full contract address cannot be confirmed from the page.
• Homepage: no named developer or team exists to check, which the repeated "Dev respond please" chat messages confirm.
• Domain registration: the domain is only weeks old, so no operating track record exists to check against.

Summary Verdict

The overall posture is high-risk and clearly cautionary. Confirmed third-party threat detections dominate the assessment and outweigh every neutral or positive technical signal. A newly registered domain, an unverified operator and a speculative, hype-driven trading interface reinforce that conclusion. The site is not suitable for any sensitive or financial interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is a CDN edge server. The origin host is not observable, and the site also uses bot protection. These controls are a modest mitigating factor only. They show competent edge hardening and do not indicate legitimacy. They also cannot offset the reputation findings above. Edge-only visibility prevents independent hosting verification and can mask rapid content changes behind a stable front end.

Closing Assessment

The site should be treated as read-only at most. No wallet should be connected, no credentials entered, and no funds committed through it.