Is pumpfunstreamersol.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a newly launched web property on the ".pro" top-level domain. Its title is simply "Pump", and its domain name combines the terms "pump", "fun", "streamer" and "sol". That naming points to the Solana token-launch and live-streaming crypto niche. It presents a single landing page to visitors, and the evidence does not establish what product, service or operator stands behind it. The pattern is consistent with a short-lived, crypto-themed promotional or transactional front end.

Scam/Impersonation Risk

Contradictory signals are present and substantial. Multiple independent security detection sources currently flag the domain as malicious, and the combined detections include several leading, widely deployed security vendors. This constitutes a confirmed blacklist condition and is the decisive factor in the assessment. No conflicting legal entities and no direct brand-impersonation match were established, so the risk rests on the external detections rather than on identity inconsistencies. The domain name evokes a well-known crypto platform and its streamer community. A name built that way is a common lure for visitors who expect an official or affiliated property, and any such affiliation should be treated as unproven. Behavioral testing of the homepage found no wallet-drainer activity, clipboard manipulation, hidden forms, cloaking or unapproved third-party data transmissions. That is a limited mitigating observation and does not offset the detections, since page behavior can be changed quickly on a young domain. The page did generate a high number of browser console errors, which suggests an unfinished or hastily assembled build. Evidence:

• Homepage and domain-level reputation: the domain is listed as malicious by a significant number of security engines, including several top-tier vendors, and is also flagged by an additional external blacklist source.
• Domain registration: registered on 2026-08-31 (~0.15 years old, about two months) through NICENIC International Group Co., Limited.
• Web-archive depth: 4 archive snapshots, all in 2026, spanning 2026-08-31 to 2026-09-21 (1 year tracked), which shows the site has existed only for weeks.
• Homepage behavior: 3 of 3 sandbox runs completed, 15 console errors were recorded, and no non-whitelisted external requests were observed.

Regulatory Verification Notes

The site presents no verifiable regulated status, and no regulatory registration or licensing relationship was established. Ownership opacity applies here: registration details for the domain holder are incomplete, so no accountable legal entity can be tied to the site. This is a governance limitation and is separate from the contradiction analysis above. No third-party broker-reputation record was matched, so there is no external regulatory or broker context to weigh either way. The site's protocol-level hygiene is intact but carries little weight. It has a valid, correctly issued TLS certificate, and domain-validated certificates only confirm control of the domain, not the identity or honesty of its operator. Evidence:

• Transport encryption: TLS certificate issued by WE1 (DV), valid to 2026-11-29, with about 34 days remaining at the time of analysis.
• Hosting: served from AS13335 (Cloudflare, Inc., US) in the ARIN registry region.
• Domain registration: the registration term runs to 2027-08-31, and the registrant details are incomplete.
• Homepage: no operator identity, regulator or license reference could be tied to the site.

What to Verify Next

Any claim of affiliation with an established crypto platform or streaming community should be checked against that organization's own published channels, reached through a separately sourced route, not through links on this site. Any wallet address, token contract or payment instruction presented on the site should be compared against independently published official details before it is trusted. The official support and contact channels should be confirmed independently. Until the external detections are cleared, the domain's reputation status should be re-checked before any reassessment. Evidence:

• Domain naming: the name combines platform and ecosystem terms, which supports checking affiliation claims against the official source.
• Reputation: detections are active at the time of analysis, so any later change in status is a material new input.
• Domain age: a registration of only about two months means there is no track record to rely on.

Summary Verdict

The overall posture is one of elevated risk. Confirmed adverse reputation from multiple independent detection sources outweighs the site's technical hygiene and the absence of overtly malicious behavior during testing. The domain is very new, its operator is unidentified, and it has no verifiable operating history. Its apparent legitimacy is therefore unsupported, and the site should be classed as untrustworthy.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is a CDN edge node. The origin server could not be observed, so the actual hosting location cannot be independently confirmed. This is a mitigating factor for availability and basic transport security, but it does not offset the reputation risk. Edge-only visibility also means content could be swapped rapidly without any change in observable hosting.

Closing Assessment

The site should not be used for account login, credential entry, wallet connection or any financial transaction. Any interaction should be limited to passive viewing from an isolated environment, and nothing should be downloaded from it. Anyone who has already entered credentials or approved a wallet connection should change the affected credentials and revoke the permissions.