pumpfung[.]top

This domain, pumpfung.top, was identified as a crypto scam impersonating the legitimate platform Pump.fun. Registered on November 26, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain resolved to IP address 104.21.37.195, hosted on Cloudflare’s infrastructure (AS13335) in the United States. Analysis indicates the domain was taken offline by the time of this report, though it remains flagged by at least one security blocklist, including PhishDestroy. The page title, 'Pump Game,' aligns with the reported scam type, suggesting an attempt to deceive users into engaging with fraudulent crypto-related activities. Three of 95 security vendors on VirusTotal flagged the domain, though the specific detection context is limited.

The domain lacked an SSL certificate, a common but not definitive indicator of malicious intent. Nameservers (jay.ns.cloudflare.com and nicole.ns.cloudflare.com) are consistent with Cloudflare’s standard configuration, which is frequently leveraged by both legitimate and malicious actors for anonymity and resilience. No evidence of a phishing kit or additional infrastructure details was provided, leaving the exact mechanics of the scam uncertain. Defenders should treat this domain as part of a broader pattern of brand impersonation targeting crypto platforms.

While currently offline, the infrastructure may resurface under a different domain or IP. Blocklist integration is recommended, particularly for environments where Pump.fun or similar platforms are in use. Monitoring for newly registered domains with similar naming patterns (e.g., 'pump' + random suffix) or reusing the same IP/hosting provider may help preempt future campaigns. Given the lack of SSL and the use of Cloudflare, network-level detection rules could focus on unencrypted traffic to newly observed domains resolving to this provider.