Is pump-streamfor.fun a scam? TrustSniffer's high-risk assessment: 16/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a live-stream and trading page on the Solana memecoin platform pump.fun, specifically for a token called $WYNX. It shows market-capitalisation, volume and price charts, a "previous streams" archive, and a scrolling community chat. Its apparent business model is to earn fees from memecoin launches and speculative trading, and its buy, sell and stream-viewing functions all sit behind a login.

Scam/Impersonation Risk

The evidence shows confirmed adverse reputation. The domain is currently on a blacklist: two independent, major security engines classify it as malicious, and further engines rate it suspicious. This outweighs everything else in the assessment. The page carries the pump.fun name, title and copyright notice, but it is served from a separate, hyphenated, newly created domain. That is a typical lookalike pattern for crypto-trading pages that harvest logins or wallet access. The evidence does not by itself prove that this domain is operated by, or affiliated with, the genuine platform. The page's own content adds to the concern. It offers a trading screen for $WYNX (market capitalisation of about $385K and 24-hour volume of about $19K) with no information on who issued the token or who is on the team, and no risk warning before purchase. The live chat is dominated by generic hype ("looks bullish", "wagmi", "ignore the fud guys", "HODL HODL HODL") and is read-only for visitors, so it provides no independent verification. The stream archive repeats one title ("Don't Panic! It's all Coin Related") in sequential 1:42, 2:42 and 3:42 durations on consecutive days, which looks templated rather than organic. The login gate in front of both the stream and the trading controls, together with an age-confirmation prompt, means any credential entered would go to an unverified operator. No identity contradictions were found, and the behavioural tests detected no wallet-drainer, clipboard-hijack or hidden-form activity. Those results do not offset the threat-intelligence detections.

Regulatory Verification Notes

The page makes no licence claim and cites no regulator, registration number or legal entity. The Fees, Revenue, Terms of service and Privacy policy links appear only as footer labels, and no operator identity or jurisdiction could be drawn from them. This is a transparency gap rather than evidence of wrongdoing in its own right. However, it matters more here than it would elsewhere, because the site invites people to buy a speculative digital asset and none of the fee mechanics are explained. Registration and ownership details for the domain are incomplete, so the operator behind it cannot be tied to any real-world person or company. No third-party broker or regulatory-database entry matched this site, so there is no external regulatory standing to rely on.

What to Verify Next

Before any engagement, confirm through an independently sourced route, such as the official platform's own channels reached by typing its address manually or via a trusted directory rather than this page, whether this domain is an authorised property of the genuine pump.fun service. The $WYNX token should be checked on a public Solana explorer to establish its creation date, holder concentration and creator wallet activity, independent of the figures shown on this page. Any claimed operator should be checked against the relevant national company and financial-services registries for a licence or registration covering token trading. The official support and contact channels should also be confirmed through a source outside this site.

Summary Verdict

The site sits in a clearly elevated-risk posture. Confirmed threat-intelligence detections, a domain only days old, an unverifiable operator and a login-gated speculative-trading funnel converge on the same conclusion. Positive technical hygiene does not alter that outcome. Legitimacy cannot be supported on the available evidence.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and all four observed addresses are Cloudflare edge servers. The origin host was not observable. This is a mitigating factor only: the certificate is valid and the hosting is mainstream. It is not evidence of legitimacy. Edge-only visibility prevents independent verification of where the content is actually served from, and it can conceal rapid content swaps behind a stable-looking front end. It therefore cannot offset the reputational detections.

Closing Assessment

This domain should not be used to log in, connect a wallet, supply credentials or buy or sell any token. Any look at the page should be limited to read-only viewing from an isolated browser environment. Anyone who has already entered credentials or approved a wallet connection here should change the affected passwords and revoke token approvals promptly. The genuine platform should be reached only through an address obtained from an independent, trusted source.