Is pumpclick.fun a scam? TrustSniffer's high-risk assessment: 0/100

pumpclick.fun
Download PDF Check another site How we score

Verdict

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

0 OUT OF 100
Critical Risk

pumpclick.fun shows high-risk / scam indicators.

Sensitive Interaction Risk Governance Risk

Assessed 2026-10-20 by automated analysis. Classification confidence 55%.

What this site appears to beA pump.fun page for the memecoin The Black Bull (ANSEM), showing a live stream, a market cap of about $99.90M, 24h volume of $396.71K, and a buy/sell panel that requires login. The live chat contains repetitive, possibly coordinated messages (e.g., 'dev is a whale', 'buying the dip'), but the page makes no profit or return promises.

Evidence status and limitations

Evidence completeness: Not recorded

  • The real-world operator identity was not independently verified.
  • Module-level completeness metadata is unavailable for this legacy report.

At a glance

The checks that decide most of this verdict.

Malware engines5 flagged itVirusTotalRisk
Google Safe BrowsingNot listedGoogleClear
Abuse reports on the host0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reportsClear
Domain age2 months oldMost scam domains are under a year oldRisk
CertificateEncrypted connectionIssued by WE1Noted
Hosted byCLOUDFLARENETServer in USNoted

The page as captured

https://pumpclick.fun/
Screenshot of the pumpclick.fun homepage captured during the TrustSniffer assessment
What pumpclick.fun served when TrustSniffer captured it on 2026-10-20. The page may look different now.

Key findings

  • Automated classification: Sensitive Interaction Risk.
  • Domain age: less than 1 year (registration continuity).
  • At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
  • The operator behind the site could not be independently connected to a real-world brand or person.

Full analysis

Security Alert

Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a pump.fun-branded memecoin launchpad and trading page, with its homepage showing a live-stream and trading view for a token called The Black Bull (ANSEM). The page shows a market capitalisation of roughly $99.9M, an all-time high near $450M, a price chart, a live chat panel, previous stream clips and prompts to download a mobile app. A buy/sell panel is gated behind a login, and the apparent business model is revenue from token creation and trading activity, with footer links to fees and revenue pages.

Scam/Impersonation Risk

The evidence shows confirmed contradictions. The domain is currently blacklisted by several independent threat-intelligence engines, including a tier-one security vendor, and external reputation sources report a pattern of malicious and suspicious detections. The page carries the pump.fun name while the domain is a different, recently created one, which is a brand-versus-domain mismatch. The brand-impersonation check did not formally confirm impersonation, and no conflicting legal identities were found. The listing is decisive on its own, because the domain is also very new and its only observed content is a trading front end where the login-gated panel is the point of financial interaction. The homepage's live chat contains repetitive, possibly coordinated messages, such as "dev is a whale" and "buying the dip", alongside "U should sell now". This is the pattern of manufactured sentiment typical of speculative memecoin promotion. The page makes no explicit profit or yield promises. Its trading mechanics and the volatility implied by the gap between the current market capitalisation and the all-time high are nonetheless inherently high-risk for any participant. Evidence:

  • Homepage: the domain was registered in August 2026 (about 0.18 years, or roughly 67 days, old), so there is no track record to offset the threat listings.
  • Homepage: the trading view claims a market capitalisation near $99.90M, 24h volume of $396.71K and an all-time high of $449.96M for ANSEM. The token's contract address appears shortened on the page, and this independent check cannot verify the figures.
  • Homepage live chat: the repetitive, apparently coordinated messages (including "dev is a whale" and "buying the dip") look like promotional pressure rather than organic discussion.
  • Homepage: the buy/sell panel requires login before any trade can be made, which places credential entry at the centre of the user journey.

Regulatory Verification Notes

The analysed page names no operating company, jurisdiction, licence, registration number or terms of service. It also provides no visible route to a legal or compliance disclosure. For a service that invites trading in volatile crypto assets, this is a content gap on the site itself. The gap is a transparency matter and does not by itself prove misconduct. Taken with the threat listings above, however, it leaves no on-site basis for assuming that the operator is accountable or regulated. No third-party broker or regulatory-database entry was matched to this site, and no regulatory standing can be inferred from the page. Ownership information is incomplete, so the real-world operator remains unconnected to any named brand or person. Evidence:

  • Homepage and footer: the visible content points to fees and revenue pages and a mobile app download, but no legal entity, licence or complaints channel is named.
  • Registration record: the domain was registered through Dynadot Inc on 2026-08-13 and runs to 2027-08-13, which is a one-year term.
  • Hosting: the site is served from AS13335 (Cloudflare, Inc., US).
  • Transport encryption: the TLS certificate is issued by WE1, a DV (domain-validated) certificate valid to 2027-01-11. DV validation confirms only control of the domain, not the identity of the operator.

What to Verify Next

Nothing on the site should be treated as authenticating it. The official pump.fun service should be reached only through an independently sourced address, such as one typed manually or taken from a trusted, offline reference, and compared against this domain. The ANSEM token's contract address and its market figures should be confirmed on a neutral blockchain explorer and market-data service rather than on this page. Any operator, licence or support claims should be confirmed through an independent route, including the relevant regulator's public register, before any contact or payment. If the domain was reached through a link, advertisement or social post, the source of that link should be reviewed and the message reported. Evidence:

  • Homepage: the page presents the pump.fun brand under a different domain, so the address comparison is the first check.
  • Homepage: the market capitalisation, volume and all-time-high figures are displayed claims with no cited source.
  • Homepage: the login-gated trading panel means that any credential or wallet interaction would take place on a flagged domain.

Summary Verdict

The overall posture is high-risk. Active threat-intelligence listings, a very recently created domain and an unverified operator identity converge on a clearly cautionary assessment. Technical hygiene such as valid encryption and a clean sandbox network profile is outweighed by the reputational evidence. The site is not suitable for any sensitive or financial interaction.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge server, so the origin host is not visible. This protection mitigates denial-of-service and basic web attacks. It does not offset the threat listings, and it means that independent verification of the real hosting location is not possible. Edge-only visibility can also mask rapid content swaps, so the page as seen today may not be the page seen tomorrow. The sandbox runs found no cloaking, no wallet-drainer behaviour, no clipboard hijacking and no unapproved external form posts. These are modest reassurances only, set against the dominant reputation risk.

Closing Assessment

At most, the domain should be viewed read-only. No login, credentials, wallet connection or funds should be entrusted to it, and nothing should be downloaded from it, including the mobile app prompt, until independent sources confirm the operator's identity and the threat listings are cleared. Anyone who has already interacted with the site should review their account and wallet permissions and treat any shared credentials as exposed.

Written analysis generated 2026-10-20 by the TrustSniffer Analysis Engine from the evidence in this report.

What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, page content, registration and ownership, behaviour in a sandbox.

01 External reputation

  • An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it.External reputation rule:EXT_BLACKLIST_CRITICAL

02 Hosting and network

  • The domain was registered less than three months ago.Hosting and network rule:DNS_NEW_DOMAIN_90D
  • The domain is young and has almost nothing else set up around it.Hosting and network rule:DNS_SPARSE_YOUNG_DOMAIN

03 Page content

  • The browser raised a warning while loading the page.Page content rule:PAGE_BROWSER_FLAGS_SUSPICIOUS

04 Registration and ownership

  • The public registration record for this domain is incomplete.Registration and ownership rule:KF_WHOIS_INCOMPLETE

05 Behaviour in a sandbox

  • The page produced an unusually high number of errors while it ran.Behaviour in a sandbox rule:BEHAV_CONSOLE_ERRORS_HIGH

Identity verification

StatusUNVERIFIED
Identity score30/100
Identity verification confidence50%
  • No on-site identity signals detected

Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.

What TrustSniffer observed

First-party facts recorded during the assessment of pumpclick.fun.

  • The request stayed on pumpclick.fun. It was not redirected to another domain. Clear
  • Registration is published under Dynadot Inc. Clear
  • DNS for this domain is served by cloudflare.com, across 2 name servers. Noted
  • The registration is paid up to 2027-08-13. Noted
  • It is hosted on CLOUDFLARENET, from a server in US. Noted

Domain intelligence

RegistrarDynadot Inc
HostingCLOUDFLARENET - Cloudflare, Inc., US
CountryUS
Server IP2606:4700:3036::ac43:81df
Name serversajay.ns.cloudflare.com, ulla.ns.cloudflare.com
CDN / edge networkDetected (cloudflare)
Resolved IP addresses4
Edge IP addresses4
Likely origin IP addresses0
SSL issuerWE1
SSL expiry2027-01-11
Domain age0.18 years (continuous registration)
Domain expiry2027-08-13
Archive first seenNot available
Archive snapshotsNot counted (archive lookup incomplete)
ReputationVirusTotal: 5 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches

About this assessment

A trust score summarises the evidence TrustSniffer could collect about pumpclick.fun at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

Already paid or signed in? Do this now

Act fast. The sooner your bank knows, the better the chance of stopping the payment.

  1. Call your bank or card company now. Use the number on the back of your card. Ask them to stop or reverse the payment.
  2. Paid with crypto? Contact the exchange or wallet app you sent it from today. Give them the address you paid.
  3. Signed in or shared a password? Change it now, on every site where you use it, and turn on two-step sign-in.
  4. Report it to the police. In the US you can also report at reportfraud.ftc.gov and ic3.gov. In other countries, use your national police or fraud reporting service.
  5. Keep the evidence. Save screenshots, receipts, emails and chat messages. Your bank and the police will ask for them.
  6. Ignore anyone who offers to get your money back for a fee. These "recovery" offers are often a second scam.

Looking for the real site? Type the company name into a search engine yourself, or use the web address printed on your card, bill or letter. Do not use links from messages or ads.

Common questions about pumpclick.fun

Is pumpclick.fun a scam?

TrustSniffer's assessment of pumpclick.fun found strong scam indicators. It scored 0 out of 100 on 2026-10-20, which is the critical-risk band. The specific signals are listed in the evidence above.

Is pumpclick.fun safe to use?

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

What is the trust score of pumpclick.fun?

pumpclick.fun scored 0 out of 100 on 2026-10-20, which places it in the critical-risk band. The score is built from the domain's age and registration history, its hosting and certificate, the content of the site itself, and third-party reputation data. There is no human rating and no user review in it.

Download this report as PDF Free, no account needed. Create one to keep a history of the sites you check.
By AminRez, Founder & Lead Security Researcher, TrustSniffer
Produced by the TrustSniffer Analysis Engine · assessed 2026-10-20 · how we assess · report a mistake