Security Scan Report: pumplive.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 3 countries across 20 domains to perform 231 HTTP transactions. The main domain is pumplive.xyz and was registered 2 months ago.

Submitted URL: https://pumplive.xyz/

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Domain flagged as malware by two feeds on the primary host and hit by 8 HIGH IDS alerts for memory-executed IPFS scripts; new, unranked site using pump.fun branding. No forms, but do not connect a wallet.

Risk Factors (5)
Multi-source malware threat-intelligence match on the primary domain (osx nova)
Eight HIGH IDS phishing/memory-execution alerts (IPFS resource executed from memory)
Right-click blocking / anti-analysis JavaScript
Very new (.xyz, 72 days) and unranked domain using a well-known crypto platform's branding
Wallet-connect wallet interface on an unvetted, malware-flagged domain
Domain age information unavailable

Details

Page Title

Pump

Scan Type

public

Domain Name Analysis

The domain name 'pumplive.xyz' uses the open generic top-level domain (.xyz) without a subdomain. The second-level label 'pumplive' is 8 characters long holding three vowels versus five consonants. Splitting it apart reveals 2 words: pump, live. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pumplive.xyz/

Page Load Overview

2.24s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,468 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
86%
finance banking
81%
e-commerce shopping
80%
blog personal website
78%
adult content
76%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11172.67.219.23Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11192.178.170.95Google · CDNUnited States
AS15169Google LLC
11104.26.3.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.32.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11185.233.175.190Ede, Gelderland, Netherlands
AS204983Cyberfusion B.V.
11142.251.110.138Google · CDNUnited States
AS15169Google LLC
11104.18.37.127Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
11104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.64.149.113Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23121--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9E3C868B280063F254342F8F2D2AB7D616C8652E623E5CDF3ED41D36785CE64D636E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:sAzqyrYq9SdgsAKvmRHsq4ro8AxmobG0rRgLVtqbHnGZ2KVA:dzq2SWK0HBbHnwrVA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146779:iYoIUIIQBsgwICEUNJJp4dClLIwtAkQkazaQAYmCGAwIgSQMUAgykPkQbGaIFqQUnegwFJkCMAIFIeAEIQyQSUhBqGgkU+OB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:812d060393333363
Perceptual Hash:ae7b23ce39264391
Difference Hash:23494c26366666d6
Wavelet Hash:81ed471393333367
Color Hash:#783a3f

Other Hashes

Crop Resistant:23494e26366666d6

Scan History

Scan history not available

Unable to load historical scan data