Is pumpfunlivestreamers.netlify.app a scam? TrustSniffer's high-risk assessment: 23/100

Overview

This is a recently created web page served from a free shared-hosting subdomain on a developer deployment platform. Its hostname refers to livestreamers for a well-known memecoin launchpad, and its homepage carries the minimal title "Pump" and a moderate amount of text. A visitor is presented with a crypto-themed landing page. Its apparent purpose is to trade on that brand's recognition, but its actual function and operator could not be established from the captured content.

Scam/Impersonation Risk

The site is blacklisted. Several independent threat-intelligence engines classify the address as malicious, and a further engine marks it suspicious. This is the decisive finding and it is not offset by anything else in the record. No conflicting legal identities and no confirmed brand impersonation were found. However, the hostname borrows the name of a prominent crypto platform on a free subdomain, and nothing on the homepage ties it to that brand. Four abuse reports exist against a shared edge address serving the site. These apply to infrastructure that many unrelated tenants share, so they are weak evidence against this site specifically and do not drive the conclusion. Behavioral testing found no wallet-connection prompts, wallet-draining routines, clipboard tampering, hidden forms, cloaking, or credential posts to external parties. This means no active theft mechanism was observed in the sandbox runs. A very young site with a name that trades on a known crypto brand and a confirmed malicious listing is a pattern typical of short-lived promotion or lure pages. Such pages can switch behavior after being deployed. Evidence:

• Homepage and hosting record: multiple threat-intelligence engines flag the site as malicious, and another marks it suspicious.
• Homepage: the page title is only "Pump" while the hostname references livestreamers, with no brand ownership statement visible.
• Behavioral sandbox on the homepage: three successful runs showed no wallet-drainer, clipboard, hidden-form or cloaking activity. They did record a high rate of browser console errors, 18 in total.
• Domain provenance: the domain is about 34 days old, with 2 archive snapshots spanning 2026-09-18 to 2026-09-22 (1 year tracked).

Regulatory Verification Notes

No license, registration number, legal entity name, or jurisdiction could be confirmed from the captured homepage. No legal or terms pages were available that would support an identity assessment. The real-world operator is therefore not independently verified. No third-party broker or regulatory-database entry matched the site. The absence of a license is a verification gap rather than proof of wrongdoing. Here it adds to a record that already contains confirmed threat listings. The only formal identity artifact is the site's certificate, which names the hosting platform and not the site's operator. It confirms encrypted transport, not who runs the site. Evidence:

• Transport encryption: the TLS certificate is OV-validated, issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 to Netlify, Inc, and valid to 2027-03-19.
• Hosting: served from AS16509 (AMAZON-02 - Amazon.com, Inc., US).
• Homepage: no corporate name, license reference, or regulator is displayed.

What to Verify Next

Any claimed affiliation with the crypto platform whose name the hostname echoes should be checked against that platform's own official channels, reached independently of this site. Any claims of livestreamer partnerships, rewards, or token offerings should be treated as unsubstantiated until confirmed there. Officially published contact channels should be confirmed through an offline or independent route. Before any further engagement, the site should be rechecked to see whether its listings have been cleared and whether its content has changed from the analyzed version. Evidence:

• Homepage: no named operator, license, or official-channel reference allows self-verification.
• Domain history: only two archive captures exist across a few days in September 2026, so there is no long record to compare against.
• Behavioral testing: the page was stable across runs, so any later change in content would be a meaningful signal.

Summary Verdict

The overall posture is high-risk. Confirmed malicious listings, an extremely young domain, and the lack of any verifiable operator outweigh the technically clean transport setup and the absence of observed active exploitation in the sandbox. Legitimacy cannot be inferred from the available evidence.

Infrastructure Integrity

The site runs behind Amazon's CDN edge network, and all four observed addresses are edge nodes on that provider's network, with the origin server not observable. The platform's hosting and its valid certificate are mitigating factors only. They do not offset the reputational findings, and edge-only visibility prevents independent verification of the real host and can mask rapid content swaps.

Closing Assessment

The site should not be used for login, credential entry, wallet connection, or any financial interaction, and nothing should be downloaded from it. Any access should be limited to passive viewing from an isolated environment.

Signals weighed against the site

• AbuseIPDB: 4 reports on hosting IP 2a05:d014:58f:6200::258 (Amazon Data Services Ireland Ltd, Content Delivery Network), 1% confidence. The reports are attributed to shared infrastructure, not specifically to this website.