Is watchpumpfun.live a scam? TrustSniffer's high-risk assessment: 1/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at watchpumpfun.live is a single-page web property whose homepage is titled "Pump" and carries a substantial block of on-page text. The domain wording suggests a link to the "pump.fun" token-launch ecosystem, but the evidence does not show what the site offers or which operator runs it. It was registered only weeks ago and appears to be a newly launched, promotional or content-style site.

Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors currently flag the domain as malicious, and further engines rate it suspicious. The result is a confirmed blacklist posture rather than a mere reputational ripple. The combination of a very recent registration and a brand-evocative domain name is a pattern commonly seen in short-lived lookalike and lure sites, and it reinforces the external detections. No conflicting legal entities appear, and no explicit brand impersonation or phishing-kit behavior was confirmed on the page itself. The external detections are nonetheless enough to treat the site as high-risk for any sensitive interaction. In the behavioral sandbox the page made no calls to external services, requested no wallet connections, and showed no clipboard manipulation or hidden forms. This lowers the likelihood of an on-page drainer, but it does not offset the third-party detections. The homepage also produced a high volume of browser console errors, which suggests an unpolished or hastily assembled build. Evidence:

• Homepage (title "Pump"): flagged malicious by 10 security engines and suspicious by 3, including three tier-one vendors.
• Domain registration: created 2026-09-14 (~0.1 years, 38 days old), with registrar NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web archive: 4 snapshots, all within 2026, from 2026-09-14 to 2026-09-22 (1 year tracked). This is a young and sparse history.
• Sandbox runs of the homepage: 3 of 3 successful, 0 external network calls, 0 wallet-connect attempts, 18 console errors.

Regulatory Verification Notes

The site discloses no verifiable operator, legal entity, license, or registration on the pages analysed. The homepage text does not connect the site to any accountable real-world organization, and operator identity remains unverified. Ownership is opaque, which is an administrative limitation of the registration. It is not an identity contradiction. No third-party broker or regulatory-database entry was matched, so there is no external regulatory context to weigh for or against the site. Taken together with the confirmed external detections, the absence of any identifiable accountable party removes the usual recourse a user would have against a regulated provider. Evidence:

• Homepage: no company name, licence number, or registration reference was identified in the captured content.
• Hosting: served from AS13335 (Cloudflare, Inc., US; registry ARIN).
• Transport encryption: TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-13 with 51 days remaining. DV confirms control of the domain, not the identity of the operator.

What to Verify Next

Any engagement should be preceded by independent checks that do not rely on the site. First, determine whether the official platform the domain name evokes actually operates this address. Do this by navigating to that platform from a source known to be genuine, such as its verified social channels or an established directory, and comparing the address with the one in question. Second, if the site claims any regulated or licensed activity, confirm it directly with the relevant registry. Third, confirm the official support and contact channels through an independent route. Fourth, re-check the domain against current threat-intelligence listings, because the flagged status may change as the site is reviewed or cleaned. Evidence:

• Domain creation on 2026-09-14 predates any observed track record, so no history exists to corroborate the site.
• The homepage offers no independently checkable operator reference to use as a starting point for registry lookups.
• Browser-based checks showed no wallet interaction during sandbox runs, so any wallet prompt appearing in a real session would be new and anomalous behavior.

Summary Verdict

The assessment is critical and clearly cautionary. Confirmed adverse reputation from multiple major security sources, a brand-evocative domain only weeks old, and no verified operator identity converge on a high-risk posture. The site's technical hygiene and the absence of observed on-page exploitation do not outweigh these convergent negative indicators. The site is unsuitable for any sensitive or financial interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, with a valid certificate and all observed addresses belonging to edge servers. The origin server was not visible, which prevents independent verification of where the content is actually hosted. This protective layer is only a mitigating factor. It does not address the reputational detections, and edge-only visibility can mask rapid content changes behind an unchanged address.

Closing Assessment

Treat the site as unsafe for sign-in, credential entry, wallet connection, and any payment or transfer of funds. If it must be examined at all, do so read-only from an isolated environment, and download nothing from it. Security teams should consider blocking the domain pending reputation clearance.