Is pumpstaking.com a scam? TrustSniffer's high-risk assessment: 25/100

Overview

The website pumpstaking.com presents itself, in its page title, as "PUMP Staking", a Solana staking protocol that invites visitors to earn SOL rewards. Its apparent business model is to attract digital-asset holders to stake or deposit cryptocurrency in return for advertised yield. The page loads reliably and carries substantial text content.

Scam/Impersonation Risk

This is a clearly cautionary assessment. The decisive contradiction is an external blacklist listing. At least one major threat-intelligence source currently flags the domain as malicious, and another flags it as suspicious. Infrastructure protections and a valid certificate cannot offset that reputation signal. The site is a newly registered domain that offers yield on a crypto asset, a category in which fund-diversion schemes commonly operate. That context raises the practical stakes of the listing. No conflicting legal-entity names were observed, and no specific impersonation of a named brand was confirmed. Browser behavior testing was comparatively benign: it found no wallet-drainer activity, clipboard manipulation, hidden or externally posting forms, content cloaking, or console errors. All outbound requests went to recognized destinations. These findings lower the likelihood of overt malicious code on the landing page. They do not rebut the listing, because a staking lure can become harmful only at the moment a wallet or funds are involved. Evidence:

• Homepage: the title advertises a Solana staking protocol that pays SOL rewards, so the site's purpose is to solicit digital-asset deposits.
• Reputation checks: one engine rated the domain malicious and one rated it suspicious, which together produced a confirmed blacklist-level hit.
• Domain provenance: the domain was registered on 2026-10-13 (about 9 days old).
• Sandbox runs: three successful runs returned stable HTTP 200 responses, with no wallet-connect, drainer, clipboard-write, or hidden-form activity.

Regulatory Verification Notes

The evidence establishes no licensing, financial-services registration, or named legal operator for a service that invites users to stake crypto assets. For a platform of this kind, that is a verification gap. It is not proof of wrongdoing on its own, and here it compounds the reputational listing above. The registration record is incomplete as to owner details, which is ownership opacity and not an identity contradiction. No third-party broker-reputation record matched this domain, so there is no independent reputational history that would offset the listing. The domain was registered through the corporate registrar GMO Internet Group (Onamae.com) for a one-year term. Evidence:

• Registrar: GMO Internet Group, Inc. d/b/a Onamae.com; registered 2026-10-13, expiring 2027-10-13.
• Transport security: TLS certificate issued by YE1 (domain-validated only), valid to 2027-01-11 with about 80 days remaining.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Owner details in the registration record are hidden or incomplete, and the evidence names no operator.

What to Verify Next

Treat the domain as unvetted until an independent route confirms that it belongs to a genuine, accountable project. Locate the project's official channels through an independent search or the documentation of a recognized Solana ecosystem source, never through links on this site. Compare the domain and branding against them. Confirm whether any registry or regulator recognizes an operator for this service. Confirm the official support and contact channels through an offline or independent route. Re-check the domain's reputation after the owner has had time to respond, since a site that was compromised or wrongly flagged is typically delisted once it is cleaned. Evidence:

• Homepage: the staking and rewards offer gives no independently confirmed operator to validate against.
• Registration: the domain is only days old, so no long-term operating record exists to lean on.
• Reputation: the current listing means any change should be confirmed through a fresh independent check.

Summary Verdict

The overall posture is elevated risk, with trust sharply constrained by a current external threat listing on a very new domain. Technical hygiene and clean sandbox behavior are present but insufficient to support a favorable conclusion. Legitimacy is neither established nor apparent, and the operator's real-world identity remains unverified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge node. The origin server could not be observed, so hosting cannot be independently verified. That limits the ability to detect rapid content swaps behind the edge. Such protection is only a mitigating factor, since this infrastructure is shared by many unrelated sites. The sparse subdomain footprint on a very young domain is an unconfirmed heuristic and carries little weight.

Closing Assessment

Limit interaction to passive, read-only viewing. Do not connect a wallet, sign transactions, deposit assets, or enter credentials or payment details until independent verification clears the listing and confirms the operator.