pump-fun-ie[.]pages[.]dev

The domain pump-fun-ie.pages.dev has been identified as a brand impersonation threat specifically targeting Pump.fun, a decentralized platform for token launches. As of the latest assessment, the domain is offline, though it remains under investigation for malicious activity. The impersonation appears designed to deceive users into believing they are interacting with the legitimate Pump.fun service, potentially facilitating unauthorized transactions or credential harvesting. Analysis of the domain reveals it was registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3. The domain was created on September 26, 2024, and is currently flagged on one security blocklist. Despite its offline status, the domain has not been detected by any of the 95 vendors on VirusTotal, indicating either a lack of widespread detection or recent takedown. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious domains. The page title, 'Pump,' further reinforces the impersonation of the legitimate Pump.fun brand. Given the domain's current offline status, the immediate risk to users is reduced. However, the infrastructure remains a potential threat if reactivated. Users and organizations are advised to monitor for any re-emergence of this domain or similar variants. Network administrators should consider blocking the IP address 188.114.96.3 and the domain pump-fun-ie.pages.dev at the firewall or DNS level. End-users should verify the authenticity of any Pump.fun-related communications or websites by cross-referencing official channels and enabling multi-factor authentication where available. Vigilance is recommended, as brand impersonation threats often reappear under slightly altered domains or infrastructure.