---
title: "Is pumpfunstreams.xyz a Scam? Trust Score 1/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "pumpfunstreams.xyz"
verdict: "Critical Risk"
title: "Is pumpfunstreams.xyz a Scam? Risk Report, Score 1/100"
trust_score: 1
classification_confidence: 75
canonical_url: https://trustsniffer.com/report/pumpfunstreams.xyz
assessed: 2026-10-25
---

# Is pumpfunstreams.xyz a scam? TrustSniffer's high-risk assessment: 1/100

## Verdict


**Verdict: Critical Risk, trust score 1/100.** pumpfunstreams.xyz shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-25 by automated analysis. Classification confidence 75%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 11 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 0 reports; shared hosting inflates reports) | Clear |
| Domain age | 2 months old (Most scam domains are under a year old) | Risk |
| Web archive | Archived since 2026 (2 snapshots) | Clear |
| Certificate | Encrypted connection (Issued by WE1) | Noted |

## The page as captured


![Screenshot of the pumpfunstreams.xyz homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/pumpfunstreams.xyz/screenshots/first.png)

_What pumpfunstreams.xyz served when TrustSniffer captured it on 2026-10-25. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- Domain age: less than 1 year (registration continuity).
- Public web-archive history exists since 2026.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This is a newly registered .xyz website, titled simply "Pump", whose domain name pairs a crypto token-launch term with a streaming theme. Its apparent purpose is to attract visitors in the memecoin and token-launch niche. The homepage is served behind a bot-challenge gate, and the pages reviewed did not establish a clear product, operator or business model beyond the branding.


### Scam/Impersonation Risk

Contradictory signals are present and decisive. Several major security vendors independently flag the domain as malicious, and the site is **blacklisted** by external reputation sources, which is a confirmed, serious negative. The domain is also very young, with almost no historical footprint, so there is no record of benign operation to offset the detections. Naming that echoes a popular token-launch platform is a pattern commonly used to attract crypto users to look-alike sites. The evidence reviewed does not confirm impersonation of a specific brand, but the combination of that naming, the detections and the lack of history is consistent with a disposable or abusive property. The sandbox visits did not observe wallet-connection prompts, clipboard manipulation, hidden forms or external data posts. These absences slightly narrow the observed attack surface but do not offset the confirmed detections, particularly because the page is gated and later content changes could introduce those behaviors. Evidence:

- Domain registered 2026-08-22 (~0.18 years old) through the registrar Global Domain Group LLC.
- Web archive holds only 2 snapshots, first captured 2026-08-31 and last 2026-10-11, all within one calendar year (2026).
- The homepage, tested over three sandbox runs, made no external requests, but it logged repeated script console errors.
- Multiple independent threat-intelligence detections remain active against the domain.

### Regulatory Verification Notes

The reviewed pages establish no operating entity, jurisdiction, licence or registration number, and the operator's real-world identity is not independently established. For a site in the crypto and token-launch space, this is a material disclosure gap. It also removes any regulated-entity or complaint-handling recourse for a user who engages. No third-party broker or regulatory-database record was matched for the domain. That absence is neutral and is not a verdict on licensing status. The site's transport encryption confirms only that the connection is encrypted, not who runs the service. Evidence:

- The homepage, titled "Pump", presents no visible corporate name or registry reference in the content captured.
- Hosted on AS13335 (Cloudflare, Inc., US).
- TLS certificate issued by WE1 (DV, domain validation only), valid to 2027-01-18.

### What to Verify Next

Any link to this domain should be checked against the official channels of the project or platform it appears to reference, and a link received through a message, advertisement or social post should be treated as unconfirmed. The operator's identity and any claimed regulatory standing should be checked through the relevant public registries, and official support or contact channels should be confirmed through an independent route rather than through the site itself. Until those checks succeed, no wallet connection, signature request, account creation or payment should be attempted. Evidence:

- The domain name pairs a well-known token-launch term with a streaming theme, so its link to any legitimate project is unconfirmed.
- The homepage is gated by a bot challenge, which limits independent inspection of what is offered after entry.
- The page title is a single generic word with no distinguishing brand statement.

### Summary Verdict

The site carries a critical, high-risk trust posture. Confirmed external threat detections combined with a very young, thinly documented domain outweigh its valid encryption and ordinary hosting. The operator's identity remains unestablished, so there is no basis for treating the site as legitimate.


### Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and all four observed addresses are edge servers, so the origin server is not observable. The hosting provider is reputable and the certificate is valid, which is mildly mitigating. Shared, reputable edge infrastructure does not vouch for the site's content and cannot offset the detections. The edge-only view also prevents independent verification of where the content is actually hosted. The domain's youth and sparse subdomain structure are unconfirmed heuristics and carry little weight beside the confirmed reputation findings.


### Closing Assessment

The site should not be used for login, credential entry, wallet connection or any financial interaction. If it is opened at all, only passive viewing from an isolated browser is appropriate, and nothing should be downloaded from it. Users who have already interacted with it should revoke any wallet approvals, change reused passwords and report the domain to the platform it appeared to reference.


_Written analysis generated 2026-10-25 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

5 findings contributed to this verdict, raised by external reputation, hosting and network, history in the web archive, registration and ownership, behaviour in a sandbox.

### 01 External reputation
- An external threat feed lists this domain: either Google Safe Browsing marked it malicious, or a significant number of malware engines flagged it. (External reputation `rule:EXT_BLACKLIST_CRITICAL`)

### 02 Hosting and network
- The domain was registered less than three months ago. (Hosting and network `rule:DNS_NEW_DOMAIN_90D`)
- The domain is young and has almost nothing else set up around it. (Hosting and network `rule:DNS_SPARSE_YOUNG_DOMAIN`)

### 03 History in the web archive
- The web archive has almost no record of this domain, which fits a site that is new. (History in the web archive `rule:ARCH_PEN_YOUNG_AND_SPARSE`)

### 04 Registration and ownership
- The public registration record for this domain is incomplete. (Registration and ownership `rule:KF_WHOIS_INCOMPLETE`)

### 05 Behaviour in a sandbox
- The page produced an unusually high number of errors while it ran. (Behaviour in a sandbox `rule:BEHAV_CONSOLE_ERRORS_HIGH`)

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of pumpfunstreams.xyz.

- The request stayed on pumpfunstreams.xyz. It was not redirected to another domain. (Clear)
- Registration is published under Global Domain Group LLC. (Clear)
- DNS for this domain is served by cloudflare.com, across 2 name servers. (Noted)
- The registration is paid up to 2027-08-22. (Noted)
- The earliest public archive of this site is from 2026-08-31. (Clear)
- It is hosted on CLOUDFLARENET, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Global Domain Group LLC |
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:3033::ac43:dd07 |
| Name servers | EOIN.NS.CLOUDFLARE.COM, OLGA.NS.CLOUDFLARE.COM |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-18 |
| Domain age | 0.18 years (continuous registration) |
| Domain expiry | 2027-08-22 |
| Archive first seen | 2026-08-31 |
| Archive snapshots | 2 |
| Reputation | VirusTotal: 11 flagged \| AbuseIPDB: 0% confidence, 0 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about pumpfunstreams.xyz at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [autonecon.xyz](https://trustsniffer.com/report/autonecon.xyz), another .xyz site assessed as critical-risk (Critical Risk, 16/100)
- [ghosts-wallet.xyz](https://trustsniffer.com/report/ghosts-wallet.xyz), another .xyz site assessed as critical-risk (Critical Risk, 10/100)
- [early-papertrade.xyz](https://trustsniffer.com/report/early-papertrade.xyz), another .xyz site assessed as critical-risk (Critical Risk, 23/100)
- [funstreamer.xyz](https://trustsniffer.com/report/funstreamer.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [catlyzoon.xyz](https://trustsniffer.com/report/catlyzoon.xyz), another .xyz site assessed as critical-risk (Critical Risk, 10/100)
- [get-stonkfun.xyz](https://trustsniffer.com/report/get-stonkfun.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [flapshreward.xyz](https://trustsniffer.com/report/flapshreward.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [tashiperk.xyz](https://trustsniffer.com/report/tashiperk.xyz), another .xyz site assessed as critical-risk (Critical Risk, 12/100)
- [invariant-exchange.net](https://trustsniffer.com/report/invariant-exchange.net), another site assessed as critical-risk (Critical Risk, 0/100)
- [hyperfoundationholders.xyz](https://trustsniffer.com/report/hyperfoundationholders.xyz), another .xyz site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [Stablecoin Freezes, Oct 26, 2026: 11 Wallets](https://trustsniffer.com/blog/stablecoin-freeze-report-2026-10-26)
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/pumpfunstreams.xyz) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/pumpfunstreams.xyz · assessed 2026-10-25.*