Is pumpsolstreams.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, served from a recently created domain with a Solana- and streaming-themed name, presents a single landing page titled "Pump" and appears to be a crypto-token-oriented web property. Its apparent purpose is to draw visitors into a token or "pump"-style service. The captured page offers no verifiable corporate presentation of what is being offered or by whom.

Scam/Impersonation Risk

The site is blacklisted by multiple independent threat-intelligence sources. A substantial number of security engines classify the domain as malicious, and a smaller further group marks it suspicious. Three tier-one security vendors are among the detecting engines. The volume of detections was enough to trigger an automatic critical-risk override, and no infrastructure or certificate signal can offset it. A recently registered domain carrying this reputation fits the lifecycle of disposable phishing or fraud infrastructure, where a domain is stood up, promoted briefly, and abandoned once flagged. No brand impersonation or conflicting legal identities were identified. The risk therefore rests on the confirmed blacklisting and the domain's short life, not on a documented impersonation of a named entity. Behavioral testing of the page found no wallet-connection prompts, no wallet-drainer behavior, no clipboard manipulation, no hidden forms, and no credential posts to external hosts. The page also showed no cloaking. That is a limited mitigating observation about what the sandbox saw on this visit. It does not clear a site whose reputation is this adverse, because malicious behavior can be introduced or switched on later. The homepage did generate a high volume of browser console errors, consistent with an unpolished or hastily assembled build. Evidence:

• Homepage and domain reputation: 13 security engines flag the domain as malicious and 3 as suspicious, including Fortinet, Kaspersky and Sophos; the domain is on external blacklists.
• Domain provenance: registered 2026-08-31 (~0.15 years old, roughly two months), with registration expiring 2027-08-31 via NICENIC INTERNATIONAL GROUP CO., LIMITED.
• Web-archive depth: only 3 archive snapshots, spanning 2026-09-08 to 2026-09-22 (1 year tracked), so no established history.
• Homepage behavior: 3 of 3 sandbox runs completed with no wallet, clipboard, hidden-form, or cloaking activity, and 15 console errors recorded.

Regulatory Verification Notes

The captured page, titled "Pump", exposes no licensing statement, no registered company name, and no registration number. No legal or identity pages were available to assess. Nothing on the site establishes who operates it or under which jurisdiction. This disclosure gap would not by itself indicate fraud. Here it compounds a confirmed adverse reputation, so the site cannot be treated as a regulated or accountable counterparty. No third-party broker or regulator listing was matched for this domain. The domain is on the uncommon .pro suffix and is under two months old, so no operating track record exists to substitute for formal disclosure. The site's technical hygiene is basic: it has a valid certificate and resolves cleanly, which many short-lived malicious sites also do. The certificate only encrypts traffic and says nothing about the operator's honesty. Evidence:

• Homepage: no legal entity, license, or registration details are published on the captured page.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Transport encryption: TLS certificate issued by WE1 (domain-validated, DV), valid to 2026-11-29, which leaves roughly one month before expiry.

What to Verify Next

No verification step is needed to confirm the adverse reputation, which is already established. Verification applies only to any claimed association with a real brand or person. If the site was reached through a message, advertisement, or social post, the sender's identity should be checked through an independent channel rather than through anything published on this domain. Any claimed token, platform, or project should be checked against its official channels, found via a trusted source, not via links on this site. Any official support or contact channel should be confirmed through that same independent route. Anyone who has already interacted with the site should review their accounts and any wallet permissions granted. Evidence:

• Homepage: the page presents no verifiable operator, so any brand claim must be validated externally.
• Domain age: the domain was registered only about two months ago, so any claim of long-standing operation is inconsistent with the record.
• Reputation: multiple independent engines currently flag the domain, so prior user reports or complaints should be searched before any contact.

Summary Verdict

The site carries a critical, elevated-risk posture. The confirmed blacklisting by independent sources is decisive, and a very young domain with no operating history reinforces it. The evidence supports treating the site as hostile until its reputation is independently cleared, and nothing observed offsets that conclusion.

Infrastructure Integrity

The site is fronted by Cloudflare's CDN and WAF, and every observed address is a CDN edge node. The origin server is not observable. That is normal for protected sites and is a modest mitigating factor, but it prevents independent verification of the true hosting and allows content to be swapped quickly behind the edge. A valid, mainstream-issued certificate is present. Protective infrastructure cannot outweigh the reputation findings.

Closing Assessment

Do not log in, enter credentials, connect a wallet, or make any payment or financial commitment on this site. Reading it is the only use consistent with its risk level, and leaving it entirely is the safer choice.