pumpstreamings[.]fun

pumpstreamings.fun entered the PhishDestroy evidence set on Feb 1, 2026. Stored content metadata identifies Genericcloudflare as the apparent target. Evidence score: 100/100 (critical).

Positive sources (6): VirusTotal, MetaMask, ScamSniffer, SEAL, URLQuery, and URLScan. VirusTotal recorded 8 detections among 93 engines: alphaMountain.ai, Gridinsoft, Seclookup, SOCRadar on May 23, 2026 at 14:10 UTC. MetaMask, ScamSniffer, and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. URLQuery recorded 100 detections. URLScan returned a malicious verdict with score 100 on Feb 1, 2026 at 04:25 UTC. Other stored checks: Google Safe Browsing returned no flag on Mar 3, 2026 at 04:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:22 UTC; content was unavailable. Registration records for the domain list HOSTINGER operations, UAB as the registrar. At collection time, the hostname resolved to 104.21.13.61 on AS13335 (CLOUDFLARENET - Cloudflare, Inc., US). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. DOM analysis completed on Apr 24, 2026 at 15:20 UTC without a scored DOM indicator (0/100); the source-based findings remained positive. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. IoC extraction completed on Aug 2, 2026 at 04:14 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

Content indicators and positive source findings support a Genericcloudflare impersonation and phishing classification. Stored content identifies Genericcloudflare as the target; the final credential or wallet interaction is unresolved.