Is pumpstreamersol.pro a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website at pumpstreamersol.pro is a newly registered, single-page web property whose homepage is titled "Pump". Its name points to a crypto-token context, but the captured page gives no independently confirmable description of an operator, product line or business model. It presents a short landing page of modest text and loads normally for visitors. Its apparent purpose is an online crypto-themed service that invites visitor interaction.

Scam/Impersonation Risk

Contradictory signals are present, and this section carries the report's decisive finding. The domain is confirmed as listed on external reputation and threat-intelligence sources: multiple independent detection engines flag it as malicious or suspicious, and one tier-one security vendor is among them. The sources do not specify the category of threat. Phishing, brand impersonation and conflicting legal identities were not separately confirmed, so the concern rests on the breadth of the detections, not on a specific attack type. The detections occur on a domain that is only weeks old, which is a pattern commonly seen with short-lived campaign domains. No third-party broker profile exists for this site, and no on-page fraud indicators were captured. The behavioral sandbox found no wallet-drainer activity, clipboard manipulation, hidden forms, credential posts to outside parties, or content cloaking. These are favorable observations, but they do not offset the external detections. The page also produced a high count of browser console errors, which suggests an unpolished or hastily assembled build. A clean sandbox run does not rule out later content swaps on a domain this new. Evidence:

• Homepage, external reputation: three detection engines rate the domain malicious and three more rate it suspicious, including one tier-one security vendor, and the domain is listed on at least one external blacklist.
• Homepage, domain provenance: registered on 2026-08-28 (~0.16 years old), so the domain has been live only a short time.
• Homepage, web-archive history: 4 archive snapshots, all from 2026 (first seen 2026-09-05, last seen 2026-10-12, 1 year tracked), so the history is short and sparse.
• Homepage, sandbox behavior: three successful runs recorded no wallet-connect abuse, no clipboard writes and no external password forms, but logged 15 console errors.

Regulatory Verification Notes

The captured pages show no company name, licence, registry number or legal-entity disclosure, and this is reported as a content gap. This is separate from the scam question, and the gap alone would not indicate wrongdoing. The domain's ownership is opaque, which is an administrative limitation and not an identity contradiction. No third-party regulatory or broker data is available, so no licensing status can be attributed to this site. Because the reputation signals are adverse, the absence of any disclosure carries more weight here than it would on an established site. Evidence:

• Homepage: no operating entity, licence or registration number is stated in the captured content.
• Domain registration: registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, with an expiry of 2027-08-28 and no owner details available.
• Transport security: the TLS certificate was issued by WE1 at domain-validation level only, valid to 2026-11-26. This confirms an encrypted connection and says nothing about who operates the site.
• Hosting: served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Before any interaction, confirm independently whether a legitimate organisation operates this domain. Search the official channels of the project or brand the name appears to reference, and check that they link back to this exact domain. If the site claims any regulated activity, confirm it with the relevant registry directly, and not through links on the site. Confirm official support and contact channels through an independent, offline route. Re-check the domain's reputation status after some time, as listings can be cleared or can spread. Evidence:

• Homepage: the title "Pump" gives no operator or brand attribution to check against.
• Domain registration: the domain is only weeks old, so a brand's established channels are the only practical way to confirm a link to it.
• External reputation: the adverse detections remain current, so a later re-check can show whether they persist.

Summary Verdict

The overall posture is clearly cautionary. Current external threat detections on a very new domain with undisclosed ownership outweigh the technically clean behavior and valid encryption observed. The evidence does not support treating this site as trustworthy, and its real-world operator remains unidentified.

Infrastructure Integrity

The site is served through Cloudflare's CDN and WAF, and all four observed edge addresses belong to that network, so the origin server is not observable. This is a mitigating factor only. It shows ordinary, mainstream hosting and a valid certificate, but it does not establish legitimacy and cannot offset the external reputation findings. Edge-only visibility also means content on the origin can be changed quickly without any visible change in hosting.

Closing Assessment

The site should be limited to passive viewing at most. No account login, credential entry, wallet connection or payment should be made on it, and nothing should be downloaded from it, unless the external detections are cleared and an independently verified operator is identified.