Is pump-voting-wu.netlify.app a scam? TrustSniffer's high-risk assessment: 0/100

Overview

This website is a subdomain on a shared hosting platform that currently serves only the platform's default "Site not found" error screen. It shows no products, services, company description, navigation or commercial content to a visitor. The hostname suggests a voting or token-promotion theme, but the page offers nothing that confirms an operating business model or a real-world operator.

Scam/Impersonation Risk

Multiple independent threat-intelligence sources currently flag this site as malicious or suspicious, and the evidence supports a confirmed blacklist hit. That is the decisive negative signal. Two further indicators point the same way. The hostname closely resembles the hosting platform's own domain, and the analysis flagged possible brand lookalike behaviour. The visible page is a bare error screen, yet the behavioural sandbox repeatedly detected hidden forms, including password-type fields, in every run. It also recorded very heavy page-structure changes after interaction. A static 404 page should not behave this way, so the observed behaviour conflicts with the displayed content. This is consistent with a placeholder or staging shell for credential collection, although no phishing page was captured. Two abuse reports were also logged against a hosting-provider address in the site's address range. They concern shared content-delivery infrastructure and are discounted as not attributable to this site. No conflicting legal identities were observed, because no legal or identity content exists to compare. Evidence:

• Homepage: shows only the default platform "Site not found" screen with no forms, links, claims or business information visible.
• Behavioural sandbox: hidden forms appeared in all three runs, with password-type fields present and large DOM mutations after interaction.
• Threat-intelligence reputation: two engines rate the site malicious and one suspicious, which triggers the blacklist finding.
• Hostname analysis: near-identical similarity to the hosting platform's domain, with a brand-lookalike suspicion.

Regulatory Verification Notes

The site provides no legal, terms, privacy, about or contact pages, and it states no company name, licence or registration number. Operator identity is therefore unverified and cannot be tied to any real-world person or entity. No third-party broker or regulatory-database match was found, and no regulated status is claimed or confirmed. These are disclosure gaps and do not on their own indicate wrongdoing. The elevated risk rests on the reputation and behavioural findings above. The transport encryption is a valid organisation-validated certificate, but it was issued to the hosting platform and not to an independent operator. It therefore says nothing about who runs this site. Evidence:

• Homepage: no legal entity, licence, registration number, address or policy pages are present.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US), registry ARIN, country US.
• TLS certificate: issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 (OV), subject organisation Netlify, Inc, valid to 2027-03-19.

What to Verify Next

No sensitive interaction is advisable while the external threat detections stand. Anyone who received this link in a message, advert or social post should trace it back to its source and confirm through an independent, offline route that the sender actually intended it. Any party claiming to run a voting or promotion service here should be asked for a verifiable corporate identity and for official contact channels published on an established domain. Where the link came from a known organisation, that organisation's security team should be asked whether the hostname is theirs. If the hostname is not theirs, it should be reported as a lookalike. Evidence:

• Homepage: contains no operator, contact or service information that could be used for direct verification.
• Hostname: the lookalike similarity to the hosting platform's domain needs to be checked against the claimed source of the link.
• Reputation findings: the current threat listings should be re-checked later to see whether they have cleared.

Summary Verdict

The overall posture is high risk. Confirmed external threat detections, a lookalike hostname, and concealed form behaviour on a page that shows no content converge to outweigh the site's technically valid encryption and mainstream hosting. Legitimacy cannot be established, and the site's real-world operator remains unidentified.

Infrastructure Integrity

The site sits behind Amazon's content-delivery and web-application-protection infrastructure, and all observed addresses are edge servers, so the true origin is not visible. This is a mitigating factor only. It shows that the hosting is mainstream, but it cannot offset the reputation findings. Edge-only visibility also prevents independent verification of the underlying host and can mask rapid content changes.

Closing Assessment

The site should be treated as unsafe for any login, credential entry or financial interaction. At most it should be viewed passively, with no sign-in details, wallet connections or payments offered. Any request that arrived through it should be treated as unverified.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.