---
title: "Is pumpfunstreamslive.netlify.app a Scam? Trust Score 2/100"
source: TrustSniffer
type: Website trust & fraud report
subject: "pumpfunstreamslive.netlify.app"
verdict: "Critical Risk"
title: "Is pumpfunstreamslive.netlify.app a Scam? Score 2/100"
trust_score: 2
classification_confidence: 55
canonical_url: https://trustsniffer.com/report/pumpfunstreamslive.netlify.app
assessed: 2026-10-22
---

# Is pumpfunstreamslive.netlify.app a scam? TrustSniffer's high-risk assessment: 2/100

## Verdict


**Verdict: Critical Risk, trust score 2/100.** pumpfunstreamslive.netlify.app shows high-risk / scam indicators.

This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.

Labels: Sensitive Interaction Risk, Governance Risk

Assessed 2026-10-22 by automated analysis. Classification confidence 55%.

## Evidence status and limitations


Evidence completeness: Not recorded

- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.

## At a glance

The checks that decide most of this verdict.

| Check | Result | Status |
| --- | --- | --- |
| Malware engines | 1 flagged it (VirusTotal) | Risk |
| Google Safe Browsing | Not listed (Google) | Clear |
| Abuse reports on the host | 0% confidence (AbuseIPDB, 2 reports; shared hosting inflates reports) | Clear |
| Domain age | Not available (No registration record was returned) | Noted |
| Certificate | Encrypted connection (Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1) | Noted |
| Hosted by | AMAZON-02 (Server in US) | Noted |

## The page as captured


![Screenshot of the pumpfunstreamslive.netlify.app homepage captured during the TrustSniffer assessment](https://trustsniffer.com/outputs/pumpfunstreamslive.netlify.app/screenshots/first.png)

_What pumpfunstreamslive.netlify.app served when TrustSniffer captured it on 2026-10-22. The page may look different now._

## Key findings


- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.

## Full analysis


### Overview

The website is a subdomain on a public application-hosting platform. Its hostname joins "pumpfun", "streams" and "live", which suggests a crypto-streaming or token-launch service. When captured, the homepage showed only a bare "Site not found" error page with a few hundred characters of text. It presented no products, company name, navigation or stated business model. Its apparent purpose is therefore unclear. The page shows no legitimate service, and the hostname wording could serve as a lure for visitors looking for a popular token-launch brand.


### Scam/Impersonation Risk

Contradictory signals are present. An external reputation source currently places the domain on a **blacklist**. Threat-intelligence aggregation shows one engine rating the host malicious and another rating it suspicious. This is the decisive factor in the assessment, and the site's technical hygiene cannot offset it. No conflicting legal identities and no confirmed brand impersonation were found, so the concern comes from the reputation hit and the site's behaviour. Two abuse reports exist against an address in the hosting provider's shared edge range. Those reports are attributed to shared infrastructure and carry no confidence weight, so they are discounted and not counted against the site. Behaviour is more concerning. The homepage appeared to be an error page, yet in all three observed sessions it contained concealed forms, including password-type inputs, and it rebuilt a large part of its page structure after interaction. Almost all of its network traffic went to third-party hosts, with many background data requests and form submissions. Every destination was a recognised service. Concealed credential inputs on a page that displays no visible content are consistent with a staging page for credential harvesting or a placeholder for a later content swap. The name also appears to borrow a popular token-launch brand. This is a lookalike pattern, not confirmed impersonation. Evidence:

- Homepage: external reputation sources return 1 malicious and 1 suspicious detection, and the domain is on an external blacklist.
- Homepage behavioural capture: 3 hidden forms and 3 password-form instances across 3 of 3 runs, 4,130 DOM mutations after interaction, and 99.6% of traffic directed externally (15 external data requests, 21 external POSTs, none to non-whitelisted hosts).
- Hosting-edge address 2a05:d014:58f:6200::259: 2 abuse reports, attributed to shared infrastructure, confidence 0, discounted.

### Regulatory Verification Notes

The captured homepage shows only an error page. No legal, terms, privacy or about content was observed, and no company name, licence, registration number or regulator reference appears. Any financial, trading, streaming or token-related offering linked to this address therefore has no stated legal basis. This is a verification gap and is not itself evidence of wrongdoing. The operator's real-world identity could not be tied to any person or organisation, so no claim of legitimacy can be made. The transport certificate is issued to the hosting platform and not to an independent operator. It proves only that the connection is encrypted and says nothing about who runs the site. No third-party broker-reputation record matched this domain. Evidence:

- Homepage: page title "Site not found", HTTP status 404, and about 368 characters of text with no identity or licensing disclosure.
- Hosting: served from AS16509 (AMAZON-02, Amazon.com, Inc., US, ARIN registry).
- Transport encryption: certificate issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, OV validation, subject organisation Netlify, Inc, valid to 2027-03-19 (148 days remaining).

### What to Verify Next

The first step is to establish how the address was reached. Links from social posts, messages or advertisements promising streams, token launches or giveaways should be treated as suspect until the sender is independently confirmed. Anyone who believes the address relates to a known token-launch brand should confirm the brand's genuine web address through its official, independently sourced channels. The hosting platform's abuse-reporting process can be used to report the page, and the organisation operating the site, if any, can be asked to establish its identity. If the page is later replaced with real content, the legal pages, company details and licensing claims should be re-assessed before any engagement. A confirmation of official support channels through an independent route is also advisable. Evidence:

- Homepage: no outbound links, brand statements or contact routes were presented to anchor the site to a known organisation.
- Hostname: a long compound label on a shared hosting subdomain, resembling a popular brand name.
- Homepage behaviour: the concealed forms and post-interaction page rebuilding mean the content could change without notice, so any earlier assessment may no longer apply.

### Summary Verdict

The site carries an elevated, clearly cautionary risk posture. A decisive reputation detection, together with concealed credential-capturing behaviour on an otherwise empty page, outweighs the basic technical hygiene present. The operator's identity is unestablished, and the site shows no evidence of a legitimate service.


### Infrastructure Integrity

The site is served through a major cloud provider's content-delivery and web-protection layer. All observed addresses are edge nodes, and the origin server was not observable. This is a mitigating factor only, because shared edge protection says nothing about the intent of the content behind it. It also prevents independent hosting verification and allows content to be swapped quickly without any visible change at the network layer.


### Closing Assessment

Treat this address as unsafe for anything beyond passive viewing. Do not enter credentials, make payments, or connect any account or wallet. If it was reached through an unsolicited link, discard the link and avoid the source's other requests until its authenticity is confirmed.


_Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report._

## What the analysis found

2 findings contributed to this verdict, raised by external reputation, behaviour in a sandbox.

### 01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal. (External reputation `rule:EXT_BLACKLIST_MEDIUM`)

### 02 Behaviour in a sandbox
- The page contained a form a visitor cannot see. (Behaviour in a sandbox `rule:BEHAV_HIDDEN_FORMS`)
- Most of what the page loaded came from other domains rather than from this one. (Behaviour in a sandbox `rule:BEHAV_EXTERNAL_RATIO_HIGH`)
- The page replaced a large part of its own content after loading. (Behaviour in a sandbox `rule:BEHAV_DOM_CHANGE_HIGH`)
- The page rewrote itself after it was interacted with, so what a visitor first sees is not what they end up on. (Behaviour in a sandbox `rule:BEHAV_DOM_DIFF_AFTER_INTERACTION`)

### Signals weighed against the site

- AbuseIPDB: 2 reports on hosting IP 2a05:d014:58f:6200::259 (Amazon Data Services Ireland Ltd, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.

## Identity verification


| Field | Value |
| --- | --- |
| Status | UNKNOWN |
| Identity score | 50/100 |
| Identity verification confidence | 30% |

- AI page analysis unavailable (page captured; identity not AI-verified)

_Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence._

## What TrustSniffer observed

First-party facts recorded during the assessment of pumpfunstreamslive.netlify.app.

- The request stayed on pumpfunstreamslive.netlify.app. It was not redirected to another domain. (Clear)
- It is hosted on AMAZON-02, from a server in US. (Noted)

## Domain intelligence


| Field | Value |
| --- | --- |
| Registrar | Not available |
| Hosting | AMAZON-02 - Amazon.com, Inc., US |
| Country | US |
| Server IP | 2a05:d014:58f:6200::259 |
| Name servers | Not available |
| CDN / edge network | Detected (aws) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1 |
| SSL expiry | 2027-03-19 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not counted (archive lookup incomplete) |
| Reputation | VirusTotal: 1 flagged \| AbuseIPDB: 0% confidence, 2 reports \| Google Safe Browsing: 0 matches |

## About this assessment


**Was this report useful?** Tell other people what you think of TrustSniffer, good or bad. An honest review helps others decide whether to rely on these checks. [Review TrustSniffer on Trustpilot](https://www.trustpilot.com/review/trustsniffer.com)

A trust score summarises the evidence TrustSniffer could collect about pumpfunstreamslive.netlify.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.

TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.

## Related on TrustSniffer
- [crypto-vdl.netlify.app](https://trustsniffer.com/report/crypto-vdl.netlify.app), a similar name (Critical Risk, 2/100)
- [portal-moonshot-0yf.netlify.app](https://trustsniffer.com/report/portal-moonshot-0yf.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-uff.netlify.app](https://trustsniffer.com/report/crypto-uff.netlify.app), a similar name (Critical Risk, 1/100)
- [crypto-a0y.netlify.app](https://trustsniffer.com/report/crypto-a0y.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-scx.netlify.app](https://trustsniffer.com/report/crypto-scx.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-crr.netlify.app](https://trustsniffer.com/report/crypto-crr.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-fk9.netlify.app](https://trustsniffer.com/report/crypto-fk9.netlify.app), a similar name (Critical Risk, 0/100)
- [crypto-o0m.netlify.app](https://trustsniffer.com/report/crypto-o0m.netlify.app), a similar name (Critical Risk, 0/100)
- [tornadocash.ws](https://trustsniffer.com/report/tornadocash.ws), another site assessed as critical-risk (Critical Risk, 0/100)
- [dionarenee.com](https://trustsniffer.com/report/dionarenee.com), another site assessed as critical-risk (Critical Risk, 0/100)
- [Every website and wallet TrustSniffer has assessed](https://trustsniffer.com/directory), the full risk directory
- [Other domains assessed as high-risk or phishing](https://trustsniffer.com/directory/phishing-domains), same verdict band
- [Check another website](https://trustsniffer.com/web-intelligence), run a new assessment
- [Check a crypto wallet address](https://trustsniffer.com/on-chain-risk), on-chain screening
- [The TrustSniffer Risk Index](https://trustsniffer.com/stats), how this verdict compares

## Guides
- [99.5% of flagged USDT wallets were frozen](https://trustsniffer.com/blog/99-5-of-flagged-usdt-wallets-were-frozen)
- [Trading Platform Scam: Checking a Blocked Balance](https://trustsniffer.com/blog/trading-platform-scam-checking-a-blocked-balance)
- [Connect a Wallet to a Scam Site: What Happens](https://trustsniffer.com/blog/connect-wallet-to-a-scam-site-what-happens)

---
*Source: [TrustSniffer](https://trustsniffer.com/report/pumpfunstreamslive.netlify.app) — independent automated trust & fraud analysis. Cite as https://trustsniffer.com/report/pumpfunstreamslive.netlify.app · assessed 2026-10-22.*