# pumpfun-ai.pages.dev — SUSPICIOUS

> pumpfun-ai.pages.dev impersonates Pump.fun. Avoid entering credentials. VirusTotal shows 0/95 detections as of latest scan.

## Summary
PhishDestroy identifies pumpfun-ai.pages.dev as an active brand impersonation domain targeting users of the legitimate Pump.fun platform. This domain masquerades as the official Pump.fun service, attempting to deceive visitors into disclosing sensitive information such as private keys, wallet credentials, or personal data. The threat is particularly insidious because it leverages Pump.fun’s established branding to lend false legitimacy, exploiting user trust in a well-known platform within the crypto and Web3 ecosystem. Technical analysis reveals the domain resolves to IP address 188.114.97.3 and is registered through Cloudflare, Inc., which obscures true ownership while providing operational infrastructure via Google Trust Services SSL certificates.  This domain was flagged under investigation with a current risk level of active. VirusTotal scans report 0 detections out of 95 antivirus engines, indicating current evasion of traditional signature-based detection systems. The domain is hosted under Cloudflare’s infrastructure and utilizes a Google Trust Services SSL certificate to mimic legitimate encrypted connections. While no blocklists have flagged this domain at the time of writing, the absence of detections does not equate to safety—especially when the domain’s naming and visual presentation closely align with a legitimate target. The combination of a trusted registrar, high-reputation hosting provider, and SSL certificate creates a deceptive appearance intended to bypass cautious scrutiny.  Users who have visited pumpfun-ai.pages.dev or interacted with its content should immediately cease any further engagement and perform a full security audit of their digital assets. If credentials, private keys, or sensitive data were entered, revoke all associated permissions immediately and transfer digital assets to a new, isolated wallet. Clear browser cache, cookies, and DNS cache to prevent persistence. Report the domain to your antivirus vendor, browser security team, and the legitimate Pump.fun platform via their official support channels. Enable multi-factor authentication on all wallets and platforms, and consider using hardware wallets or secure vaults for enhanced protection. Remain vigilant for further impersonation attempts across domains, social media, and messaging platforms, as threat actors frequently recycle tactics and infrastructure once a campaign is exposed.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Pump.fun

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/e46709d9-e272-4659-bf0d-1d5d5bbe71a2
- PhishDestroy: https://phishdestroy.io/domain/pumpfun-ai.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/pumpfun-ai.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpfun-ai.pages.dev/
Last updated: 2026-03-24