Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pump-gostream.fun shows high-risk / scam indicators.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 11 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20262 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
This website presents itself as a memecoin launch-and-trade platform on the Solana blockchain. Its homepage title reads like that of the well-known pump.fun service, but it is served from a different and very recently created domain. It appears to offer visitors a way to create and speculatively trade newly issued tokens, so its apparent business model is a token-trading front end.
Scam/Impersonation Risk
The evidence converges on an elevated threat posture. Multiple independent reputation sources currently flag the domain as malicious or suspicious, and one major security vendor is among those flagging it. This amounts to a confirmed blacklist presence that infrastructure protections cannot offset. The homepage title copies the branding of an established memecoin launchpad, while the domain is a hyphenated variant carrying an unrelated "gostream" label. This brand-versus-domain mismatch is a classic lookalike pattern, and the domain's age and the external listings both fit it. The evidence does not show a specific victim brand being formally confirmed as impersonated, but the pairing of borrowed branding and external detections calls for a cautionary reading. Memecoin trading sites are also a common vehicle for wallet-draining flows, fake token launches and counterfeit trading interfaces. The automated browser sessions did not observe wallet-connection prompts, clipboard tampering, hidden forms, credential posts to third parties or content cloaking. That is a limited reassurance about observed behavior, not evidence of legitimacy, and the content could change without notice. No conflicting legal entities were found, so this is not an identity contradiction.
- Homepage: the page title advertises launching and trading memecoins on Solana under the pump.fun name, which does not match the serving domain.
- Reputation sources: two engines rate the domain malicious and two suspicious, including a tier-one security vendor, and an external blacklist listing is active.
- Browser sandbox: three of three runs returned a stable page with no wallet-drainer, clipboard-hijack or cloaking behavior detected.
- Domain registration: registered 2026-10-11 (about 10 days old, roughly 0.03 years), which is an extremely young domain for a service presenting itself as an established brand.
Regulatory Verification Notes
The evidence does not connect the site to any named legal entity, regulated operator or licensing body. Ownership and governance are opaque, and nothing indicates that the platform is authorized to offer token trading or other financial-type services. A missing license is a verification gap rather than proof of wrongdoing, but here it stands alongside the external threat listings and the borrowed branding. No third-party broker or regulatory-database record matched the site, so no external reputational context is available beyond the threat listings already described. Registration shows only a commercial registrar with no corporate registrant identified.
- Registration: registrar is NICENIC International Group Co., Limited, created 2026-10-11 and expiring 2027-10-11, a one-year term.
- Web archive: 2 snapshots, both captured on 2026-10-12 (1 year tracked), so there is no meaningful operating history.
- Hosting: served from AS13335 (Cloudflare, Inc., US), which reveals nothing about the real operator.
- TLS: certificate issued by YE1 (DV, domain validation only), valid to 2027-01-09. DV confirms control of the domain, not the identity of the business.
What to Verify Next
Before any interaction, confirm independently whether the genuine pump.fun service operates on this domain. Do this by reaching that service through a previously bookmarked or officially published address, not through this site or any link that led to it. Check whether the original brand's official channels name this domain, and confirm the support channels they publish. Any claim of authorization to offer token trading should be checked directly with the relevant financial regulator's public register in the user's jurisdiction. Where this site was reached through a message, advertisement or social post, treat that source as unverified and consider reporting it.
- Homepage: the branded title and the unrelated domain label are the discrepancy to resolve against the official service.
- Reputation sources: the active detections should be rechecked on public reputation portals, since listings can change after cleanup or reclassification.
- Registration record: the domain's creation date falls days before the analysis, so any claim of long standing on the site can be disregarded.
Summary Verdict
The site is assessed as high-risk. Active external threat detections combine with a brand-lookalike presentation and a brand-new domain with no operating history, and no positive signal is strong enough to outweigh them. The apparent legitimacy of the page is not supported by independent evidence of who runs it.
Infrastructure Integrity
The site sits behind Cloudflare's CDN and WAF, and all observed addresses are edge servers, so the origin host was not observable. The TLS certificate is valid with a recognized issuer. These are mitigating factors only: they show competent basic hosting hygiene, not good intent, and they cannot offset the reputation findings. Edge-only visibility also means the underlying content can be changed rapidly without any change at the visible address. An unconfirmed heuristic notes a young domain with sparse subdomains, which is consistent with the domain's recent creation.
Closing Assessment
The site should be treated as read-only at most. Wallet connections, transaction signing, deposits, token purchases and any login or credential entry should be avoided entirely. Anyone who has already interacted with it should review and revoke any wallet permissions granted and move funds if exposure is suspected.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership.
01 External reputation
- Several malware engines flagged this domain.External reputation
rule:EXT_BLACKLIST_HIGH
02 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D - The domain is young and has almost nothing else set up around it.Hosting and network
rule:DNS_SPARSE_YOUNG_DOMAIN
03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
04 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pump-gostream.fun.
- The request stayed on pump-gostream.fun. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-10-11. Noted
- The earliest public archive of this site is from 2026-10-12. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3036::6815:adb |
| Name servers | jasper.ns.cloudflare.com, vera.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE1 |
| SSL expiry | 2027-01-09 |
| Domain age | 0.03 years (continuous registration) |
| Domain expiry | 2027-10-11 |
| Archive first seen | 2026-10-12 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pump-gostream.fun at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.