Security Scan Report: pumpfunstreams.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 3 countries across 20 domains to perform 237 HTTP transactions. The main domain is pumpfunstreams.xyz and was registered 2 months ago.

Submitted URL: https://pumpfunstreams.xyz/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Lookalike pump.fun livestream/crypto trading page on a 65-day-old domain, flagged as osx nova malware by two feeds with eight HIGH phishing IDS alerts and right-click blocking. Do not connect a wallet.

Risk Factors (6)
Content-malware Indicators of Compromise match on the primary domain (osx nova malware, 2 feeds)
Eight HIGH phishing IDS alerts for in-memory script execution from an IPFS resource
Brand impersonation of pump.fun on pumpfunstreams.xyz
Wallet-connect / trading funnel designed to capture crypto wallet authorization
Anti-analysis behaviour (context menu disabled)
Fabricated chat stream seeded with repetitive 'buy pressure' / 'market about to pump' shill messages
Domain age information unavailable

Details

Page Title

Pump

Scan Type

public

Domain Name Analysis

The domain name 'pumpfunstreams.xyz' uses the open generic top-level domain (.xyz). The core label 'pumpfunstreams' covers 14 characters with four vowels and ten consonants. Breaking it apart gives 3 words: pump, fun, streams. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pumpfunstreams.xyz/

Page Load Overview

3.74s
Total Load Time
16.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,468 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
86%
finance banking
81%
e-commerce shopping
80%
blog personal website
78%
adult content
76%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.217.208.95Google · CDNUnited States
AS15169Google LLC
10104.26.2.6Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.32.94Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10185.233.175.190Ede, Gelderland, Netherlands
AS204983Cyberfusion B.V.
10142.251.110.102Google · CDNUnited States
AS15169Google LLC
10104.18.37.127Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10146.75.121.91Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
10104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
23723--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DCE3B868B280063F254342F8F2D2AB7D616C8652E623E5CDF3ED41D36785CE64D636E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:LKzqyrYq9RdgsAGvmRHsq4ro8AxmobG0rRgLVt10HnGZ2KVrPx/C:ezq2RWG0Hu0HnwrVrFC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:147918:QBAFamsAAhFGQJQWDSFDBHwLMILQAAAkAQ0CAYMEFpDIRxYkgoYppJcmuwBRJgEC0yUBDiCS3IGAiubXEgIEyICIORhCxo28

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:812d070293333363
Perceptual Hash:a67be3ce38262199
Difference Hash:23494e26366666d6
Wavelet Hash:81ed43139333336f
Color Hash:#741f93

Other Hashes

Crop Resistant:23494e26366666d6

Scan History

Scan history not available

Unable to load historical scan data