Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
pump-strem.fun shows high-risk / scam indicators.
| What this site appears to be | Pump.fun is a Solana-focused platform for creating and trading memecoins with live streaming and chat. It is custodial/centralized in flow (login required to buy) and displays market data and community features; on-page transparency about audits, custody, or regulatory status is limited. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 7 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | 29 days oldMost scam domains are under a year old | Risk |
| Web archive | Archived since 20263 snapshots | Clear |
| Certificate | Encrypted connectionIssued by YE2 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Security Alert
Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.
The website presents itself as Pump.fun, a Solana-focused platform for launching and trading memecoins, with live market streams, chat, token metrics, and account-based trading functionality; its apparent business model is a custodial or centralized trading service monetized through platform and transaction fees.
Scam/Impersonation Risk
The site presents a critical sensitive-interaction risk. Confirmed blacklist detections and multiple malicious classifications are decisive adverse signals, notwithstanding the presence of functioning pages and valid transport encryption. The homepage also places financial activity behind login, displays a buy interface for the WYNX token, and indicates that trading requires account access; this creates a direct sensitive-interaction surface alongside the observed custodial-control, deposit-before-service, opaque-value-flow, and high-stakes evidence gaps. No separate conflicting legal identities or confirmed brand-impersonation finding was observed, but the external threat detections are sufficient to require a clearly cautionary posture.
- The homepage provides “Log in to buy” and shows a trading interface for WYNX, including buy, sell, slippage, position, and profit/loss functions.
- External reputation assessment recorded a confirmed blacklist condition, seven malicious detections, and two suspicious detections.
- The domain was registered in 2026 and is approximately 0.08 years old through NICENIC INTERNATIONAL GROUP CO., LIMITED; the archive records 3 snapshots spanning 2026–2026, with 1 year tracked.
Regulatory Verification Notes
The available legal navigation includes Terms of Service, Privacy Policy, Fees, Support, and Revenue pages, but the examined material does not state a licensing authority or registration number. The site’s own description of a custodial crypto trading service therefore requires regulatory and custody verification before any financial interaction. Identity linkage is assessed as likely rather than independently verified, so the site’s presentation should not be treated as proof of the real-world operator. The absence of a matched broker-reputation record is only contextual and does not establish authorization or legitimacy.
- The homepage links to Terms of Service, Privacy Policy, Fees, Revenue, and Support pages; no licensing authority or license number is presented in the supplied page content.
- The site’s transport certificate is DV-validated, issued by YE2, and valid to 2026-12-20.
- The site is served through AS13335, CLOUDFLARENET - Cloudflare, Inc., US.
What to Verify Next
Before any account, wallet, credential, or financial interaction, an independent party should confirm the operator’s legal identity and authorization directly with the relevant financial or digital-asset regulator, using registry information obtained outside the site. The Terms, Fees, Revenue, and custody disclosures should be reviewed for the legal counterparty, asset-control arrangements, withdrawal rights, dispute process, and fee destination. Official support and social channels should also be confirmed through an independently established route, and any security or remediation clearance should be obtained from a trusted external source before proceeding.
- The site provides dedicated Terms, Fees, Revenue, and Support navigation for document and counterparty review.
- The homepage exposes a login form and a trade-order form, making credential and transaction authorization relevant verification points.
- The site links to one external social domain, which can be checked independently against authoritative operator information.
Summary Verdict
The website has a critical trust posture and is unsuitable for sensitive interaction on the evidence supplied. Its apparent operating functionality does not offset the confirmed external threat detections and the unresolved risk surrounding financial access and operator accountability.
Infrastructure Integrity
Cloudflare CDN and WAF protection provide a mitigating layer against direct exposure of the hosting environment, but they do not validate the operator or neutralize the external reputation findings. All observed addresses were Cloudflare edge infrastructure, and no origin server was identified in the supplied analysis.
Closing Assessment
The appropriate course is to suspend login, credential submission, wallet connection, and financial activity until independent regulatory, operator-identity, and security-clearance checks have been completed.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
4 findings contributed to this verdict, raised by external reputation, page content, hosting and network, history in the web archive.
01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation
rule:EXT_BLACKLIST_CRITICAL
02 Page content
- The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME
03 Hosting and network
- The domain was registered less than three months ago.Hosting and network
rule:DNS_NEW_DOMAIN_90D
04 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new.History in the web archive
rule:ARCH_PEN_YOUNG_AND_SPARSE
Identity verification
| Status | LIKELY |
|---|---|
| Identity score | 73/100 |
| Identity verification confidence | 74% |
- Trusted social count=1
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of pump-strem.fun.
- The request stayed on pump-strem.fun. It was not redirected to another domain. Clear
- Registration is published under NICENIC INTERNATIONAL GROUP CO., LIMITED. Clear
- DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
- The registration is paid up to 2027-09-21. Noted
- The earliest public archive of this site is from 2026-09-21. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | NICENIC INTERNATIONAL GROUP CO., LIMITED |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3034::6815:4196 |
| Name servers | nash.ns.cloudflare.com, teagan.ns.cloudflare.com |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | YE2 |
| SSL expiry | 2026-12-20 |
| Domain age | 0.08 years (continuous registration) |
| Domain expiry | 2027-09-21 |
| Archive first seen | 2026-09-21 |
| Archive snapshots | 3 |
| Reputation | VirusTotal: 7 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about pump-strem.fun at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.