Is pumpfunstreamslive.netlify.app a scam? TrustSniffer's high-risk assessment: 2/100

Overview

The website is a subdomain on a public application-hosting platform. Its hostname joins "pumpfun", "streams" and "live", which suggests a crypto-streaming or token-launch service. When captured, the homepage showed only a bare "Site not found" error page with a few hundred characters of text. It presented no products, company name, navigation or stated business model. Its apparent purpose is therefore unclear. The page shows no legitimate service, and the hostname wording could serve as a lure for visitors looking for a popular token-launch brand.

Scam/Impersonation Risk

Contradictory signals are present. An external reputation source currently places the domain on a blacklist. Threat-intelligence aggregation shows one engine rating the host malicious and another rating it suspicious. This is the decisive factor in the assessment, and the site's technical hygiene cannot offset it. No conflicting legal identities and no confirmed brand impersonation were found, so the concern comes from the reputation hit and the site's behaviour. Two abuse reports exist against an address in the hosting provider's shared edge range. Those reports are attributed to shared infrastructure and carry no confidence weight, so they are discounted and not counted against the site. Behaviour is more concerning. The homepage appeared to be an error page, yet in all three observed sessions it contained concealed forms, including password-type inputs, and it rebuilt a large part of its page structure after interaction. Almost all of its network traffic went to third-party hosts, with many background data requests and form submissions. Every destination was a recognised service. Concealed credential inputs on a page that displays no visible content are consistent with a staging page for credential harvesting or a placeholder for a later content swap. The name also appears to borrow a popular token-launch brand. This is a lookalike pattern, not confirmed impersonation. Evidence:

• Homepage: external reputation sources return 1 malicious and 1 suspicious detection, and the domain is on an external blacklist.
• Homepage behavioural capture: 3 hidden forms and 3 password-form instances across 3 of 3 runs, 4,130 DOM mutations after interaction, and 99.6% of traffic directed externally (15 external data requests, 21 external POSTs, none to non-whitelisted hosts).
• Hosting-edge address 2a05:d014:58f:6200::259: 2 abuse reports, attributed to shared infrastructure, confidence 0, discounted.

Regulatory Verification Notes

The captured homepage shows only an error page. No legal, terms, privacy or about content was observed, and no company name, licence, registration number or regulator reference appears. Any financial, trading, streaming or token-related offering linked to this address therefore has no stated legal basis. This is a verification gap and is not itself evidence of wrongdoing. The operator's real-world identity could not be tied to any person or organisation, so no claim of legitimacy can be made. The transport certificate is issued to the hosting platform and not to an independent operator. It proves only that the connection is encrypted and says nothing about who runs the site. No third-party broker-reputation record matched this domain. Evidence:

• Homepage: page title "Site not found", HTTP status 404, and about 368 characters of text with no identity or licensing disclosure.
• Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US, ARIN registry).
• Transport encryption: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organisation Netlify, Inc, valid to 2027-03-19 (148 days remaining).

What to Verify Next

The first step is to establish how the address was reached. Links from social posts, messages or advertisements promising streams, token launches or giveaways should be treated as suspect until the sender is independently confirmed. Anyone who believes the address relates to a known token-launch brand should confirm the brand's genuine web address through its official, independently sourced channels. The hosting platform's abuse-reporting process can be used to report the page, and the organisation operating the site, if any, can be asked to establish its identity. If the page is later replaced with real content, the legal pages, company details and licensing claims should be re-assessed before any engagement. A confirmation of official support channels through an independent route is also advisable. Evidence:

• Homepage: no outbound links, brand statements or contact routes were presented to anchor the site to a known organisation.
• Hostname: a long compound label on a shared hosting subdomain, resembling a popular brand name.
• Homepage behaviour: the concealed forms and post-interaction page rebuilding mean the content could change without notice, so any earlier assessment may no longer apply.

Summary Verdict

The site carries an elevated, clearly cautionary risk posture. A decisive reputation detection, together with concealed credential-capturing behaviour on an otherwise empty page, outweighs the basic technical hygiene present. The operator's identity is unestablished, and the site shows no evidence of a legitimate service.

Infrastructure Integrity

The site is served through a major cloud provider's content-delivery and web-protection layer. All observed addresses are edge nodes, and the origin server was not observable. This is a mitigating factor only, because shared edge protection says nothing about the intent of the content behind it. It also prevents independent hosting verification and allows content to be swapped quickly without any visible change at the network layer.

Closing Assessment

Treat this address as unsafe for anything beyond passive viewing. Do not enter credentials, make payments, or connect any account or wallet. If it was reached through an unsolicited link, discard the link and avoid the source's other requests until its authenticity is confirmed.

Signals weighed against the site

• AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.