--- title: "Is pump-voting-r1.netlify.app a Scam? Trust Score 5/100" source: TrustSniffer type: Website trust & fraud report subject: "pump-voting-r1.netlify.app" verdict: "Critical Risk" title: "Is pump-voting-r1.netlify.app a Scam? Trust Review, 5/100" trust_score: 5 classification_confidence: 55 canonical_url: https://trustsniffer.com/report/pump-voting-r1.netlify.app assessed: 2026-10-19 --- # Is pump-voting-r1.netlify.app a scam? 5/100 ## Verdict **Verdict: Critical Risk, trust score 5/100.** pump-voting-r1.netlify.app shows high-risk / scam indicators. This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site. Labels: Sensitive Interaction Risk, Governance Risk Assessed 2026-10-19 by automated analysis. Classification confidence 55%. | Field | Value | | --- | --- | | What this site appears to be | A Netlify hosting 'Site not found' 404 error page with no site content, forms, offers, or claims to evaluate; the requested site is not currently served. | ## Evidence status and limitations Evidence completeness: Not recorded - The real-world operator identity was not independently verified. - Module-level completeness metadata is unavailable for this legacy report. ## At a glance The checks that decide most of this verdict. | Check | Result | Status | | --- | --- | --- | | Malware engines | 1 flagged it (VirusTotal) | Risk | | Google Safe Browsing | Not listed (Google) | Clear | | Abuse reports on the host | 1% confidence (AbuseIPDB, 4 reports; shared hosting inflates reports) | Clear | | Domain age | Not available (No registration record was returned) | Noted | | Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted | | Hosted by | AMAZON-02 (Server in US) | Noted | ## The page as captured ![Screenshot of the pump-voting-r1.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/pump-voting-r1.netlify.app/screenshots/first.png) _What pump-voting-r1.netlify.app served when TrustSniffer captured it on 2026-10-19. The page may look different now._ ## Key findings - Automated classification: Sensitive Interaction Risk. - At least one reputation service TrustSniffer consulted had flagged this domain at assessment time. - The operator behind the site could not be independently connected to a real-world brand or person. ## Full analysis ### Overview This website is a subdomain on Netlify's shared hosting platform. It currently serves only the platform's generic "Site not found" error page, which tells the visitor that the requested address does not exist and offers hosting-support troubleshooting links. The page carries no products, offers, pricing, branding or stated business model, so the site's purpose can only be inferred from the address, which suggests a voting or promotion-themed project in the crypto "pump" vernacular. In practice it is an unpopulated placeholder address with no verifiable operator. ### Scam/Impersonation Risk The contradictory signals are serious and are the reason for a clearly cautionary posture. A threat-intelligence feed currently lists this domain as an active distributor of phishing content. The most recent listing was observed the day before this analysis, and the listing is decisive. The domain is also on an external blacklist, with one reputation engine rating it malicious and another rating it suspicious. The sandbox behaviour reinforces this. The visible page is a static error screen with no forms, but in every run the sandbox detected hidden forms and password-type form elements. After interaction the page's structure changed on a very large scale, which a static 404 would not produce. The sandbox also flagged a mismatch between the requested and final destination. This pattern is consistent with a placeholder that can swap in credential-harvesting content or redirect traffic, so the clean-looking error page should not be read as reassurance. Four abuse reports exist against one of the shared edge addresses the site resolves to. They apply to shared provider infrastructure rather than to this domain specifically, so they are corroborating background only and not independent proof. No brand impersonation and no conflicting legal identities were observed, and the weight of the assessment rests on the phishing listing and the blacklist. Evidence: - Homepage: only a "Site not found" notice with a hosting-platform troubleshooting link and a "Start building" prompt, with no content, claims, or contact details. - Sandbox: hidden forms were detected in all 3 runs, with password-form elements present. DOM mutations reached 4,132 after interaction. - Threat feed: an active phishing-class listing was last seen on 2026-10-18. - Reputation sources: 1 malicious and 1 suspicious detection. Of the 4 abuse reports, the latest was filed 25 days before analysis. ### Regulatory Verification Notes The site presents no legal, identity, licensing or regulatory pages. It makes no claim to any license, registration or regulated status, so there is nothing on the site to test against a registry, and the absence of disclosure leaves no content on which any legitimacy could rest. The valid, organisation-validated TLS certificate identifies the hosting platform as its subject, not the operator of this subdomain. It confirms encrypted transport only and says nothing about who runs the site. The broker-reputation lookup returned no match, which is neutral context and not a regulatory finding. Identity remains unverified, and the evidence does not support describing the operator as a legitimate or regulated business. Evidence: - Homepage: no company name, license number, terms, privacy policy or contact page is presented. - Transport encryption: the certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV) to Netlify, Inc, valid to 2027-03-19. - Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US). - Broker-reputation dataset: no match for this domain. ### What to Verify Next No one should interact with this address until the phishing listing is cleared. A party who believes they own the address should audit their Netlify account for unauthorised deployments, form handlers and redirect rules, then remove any unrecognised content. They should also rotate credentials and tokens linked to that account. Anyone who received this link as a voting, promotion or token-related invitation should confirm through an independent route, such as the project's officially published channels reached by manual navigation, whether the address is genuine. Any credentials or wallet details already entered through it should be treated as exposed. The listing status should be re-checked after any remediation before the address is treated as safe again. Evidence: - Threat feed: the phishing-class listing was current as of 2026-10-18. - Sandbox: hidden password-capable forms recurred in all 3 runs on a page that visibly shows only an error notice. - Homepage: no official contact route or project identity is published for independent confirmation. ### Summary Verdict The evidence supports an elevated-risk posture. Current third-party threat detections and the sandbox's anomalous behaviour outweigh the valid encryption and mainstream hosting. The operator is unidentified, and nothing on the site offsets the adverse listing. The domain should be treated as a probable credential-harvesting or phishing vector until the evidence changes. ### Infrastructure Integrity The site resolves entirely to content-delivery edge addresses on a major cloud provider. The origin server was not observable, so hosting cannot be independently attributed beyond the shared platform. The subdomain sits on infrastructure used by many unrelated tenants. This is a mitigating factor only: it explains why the abuse reports are attributed to shared infrastructure, but it cannot offset the active threat listing or the sandbox findings. ### Closing Assessment The address should not be used for login, credential entry, wallet connection or any financial interaction, and nothing should be downloaded from it. Any link that directs traffic here should be treated as suspect and reported to the hosting platform's abuse channel, and the domain should be re-assessed only after the listing has been removed. _Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report._ ## What the analysis found 3 findings contributed to this verdict, raised by governance, external reputation, behaviour in a sandbox. ### 01 Governance - A threat-intelligence feed currently lists a file on this site as malicious, and that caps the score while the listing is live. (Governance `rule:gov_active_threat_listing`) ### 02 External reputation - A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`) ### 03 Behaviour in a sandbox - The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`) - The page replaced a large part of its own content after loading. (Behaviour in a sandbox `rule:BEHAV_DOM_CHANGE_HIGH`) - The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on. (Behaviour in a sandbox `rule:BEHAV_DOM_DIFF_AFTER_INTERACTION`) ### Signals weighed against the site - AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website. ## Identity verification | Field | Value | | --- | --- | | Status | UNVERIFIED | | Identity score | 30/100 | | Identity verification confidence | 50% | - No on-site identity signals detected _Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._ ## What TrustSniffer observed First-party facts recorded during the assessment of pump-voting-r1.netlify.app. - The request stayed on pump-voting-r1.netlify.app. It was not redirected to another domain. (Clear) - It is hosted on AMAZON-02, from a server in US. (Noted) ## Domain intelligence | Field | Value | | --- | --- | | Registrar | Not available | | Hosting | AMAZON-02 - Amazon.com, Inc., US | | Country | US | | Server IP | 2a05:d014:58f:6200::258 | | Name servers | Not available | | CDN / edge network | Detected (aws) | | Resolved IP addresses | 4 | | Edge IP addresses | 4 | | Likely origin IP addresses | 0 | | SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | | SSL expiry | 2027-03-19 | | Domain age | Not available (no registration date was returned) | | Domain expiry | Not available | | Archive first seen | Not available | | Archive snapshots | Not counted (archive lookup incomplete) | | Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 1% confidence, 4 reports \| Google Safe Browsing: 0 matches | ## About this assessment **Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com) A trust score summarises the evidence TrustSniffer could collect about pump-voting-r1.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present. TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed. ## Related on TrustSniffer - [crypto-bes.netlify.app](https://trustsniffer.com/report/crypto-bes.netlify.app), a similar name (Critical Risk, 0/100) - [crypto-ls3.netlify.app](https://trustsniffer.com/report/crypto-ls3.netlify.app), a similar name (Critical Risk, 0/100) - [okxrobinhood-claimtoken.netlify.app](https://trustsniffer.com/report/okxrobinhood-claimtoken.netlify.app), a similar name (Critical Risk, 0/100) - [reward-claim-drop.netlify.app](https://trustsniffer.com/report/reward-claim-drop.netlify.app), a similar name (Critical Risk, 0/100) - [defijup.netlify.app](https://trustsniffer.com/report/defijup.netlify.app), a similar name (Critical Risk, 0/100) - [crypto-pfw.netlify.app](https://trustsniffer.com/report/crypto-pfw.netlify.app), a similar name (Critical Risk, 0/100) - [memes-airdrop.netlify.app](https://trustsniffer.com/report/memes-airdrop.netlify.app), a similar name (Critical Risk, 0/100) - [crypto-tuk.netlify.app](https://trustsniffer.com/report/crypto-tuk.netlify.app), a similar name (Critical Risk, 2/100) - [clickfast-mint4.netlify.app](https://trustsniffer.com/report/clickfast-mint4.netlify.app), a similar name (Critical Risk, 4/100) - [frankoceansol.xyz](https://trustsniffer.com/report/frankoceansol.xyz), another site assessed as critical-risk (Critical Risk, 0/100) - [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory - [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band - [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment - [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening - [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares ## Guides - [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens) - [Stablecoin Freezes, Oct 24, 2026: 15 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-24) - [Fake Airdrop Sites Show a Number, Not a Transfer](https://trustsniffer.com/blog/fake-airdrop-sites-show-a-number-not-a-transfer) --- *Source: [TrustSniffer](https://trustsniffer.com/report/pump-voting-r1.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/pump-voting-r1.netlify.app · assessed 2026-10-19.*