# pumpfun-allocation.com — SUSPICIOUS

> Pumpfun-allocation.com was flagged for phishing and is now offline. Avoid interacting with it to protect your personal data.

## Summary
PhishDestroy identifies pumpfun-allocation.com as a medium-risk generic phishing domain. The site displayed a page titled "Nur einen Moment…" which is commonly used to mimic legitimate loading or waiting screens, a tactic often employed to deceive users into providing sensitive information. Although currently offline, this domain was involved in phishing attempts aimed at capturing user credentials or personal data.

The domain was registered through GRANSY S.R.O D/B/A SUBREG.CZ and created recently on October 5, 2025. It has appeared on three security blocklists and was detected in one AlienVault OTX threat pulse. The domain resolved to the IP address 198.18.0.38 and was flagged by three security vendors on VirusTotal out of 95, indicating some level of suspicious activity. These infrastructure details suggest a coordinated effort to exploit unsuspecting users.

Users are advised to avoid visiting or interacting with pumpfun-allocation.com or any related URLs. If you have encountered this domain, do not enter any personal or financial information. Employ up-to-date antivirus software, enable browser phishing protection, and report suspicious websites to your IT security team or relevant authorities. Staying vigilant helps prevent falling victim to phishing attacks like those associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Pump.fun
- Page title: Nur einen Moment…

## Domain Intelligence
- Registered: 2025-10-05 18:48:12
- Expires: 2026-10-05 18:48:12
- Registrar: GRANSY S.R.O D/B/A SUBREG.CZ
- Country: CZ
- IP: 172.67.158.42
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: decker.ns.cloudflare.com hera.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["CRDF", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199fcaf-e3cc-76e5-a908-03233b2d4ce8.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/96d3a116-5fb5-44ae-a6fc-7ef095fdcff1
- PhishDestroy: https://phishdestroy.io/domain/pumpfun-allocation.com/
- LLM endpoint: https://phishdestroy.io/domain/pumpfun-allocation.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpfun-allocation.com/
Last updated: 2026-03-19