pumpfung[.]icu

Analysis of pumpfung.icu confirms its classification as a crypto scam site impersonating the legitimate platform Pump.fun. The domain, registered on November 26, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, was taken offline prior to this assessment. Infrastructure analysis reveals Cloudflare hosting (AS13335) with nameservers jay.ns.cloudflare.com and nicole.ns.cloudflare.com, resolving to IP 188.114.96.3, located in the US. The SSL certificate, issued by Google Trust Services (WE1), and HTTP/3 protocol support further indicate modern infrastructure typical of fraudulent operations.

Security vendor detections on VirusTotal flagged the domain as malicious, with 8 of 95 engines identifying it as a threat. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. The page title, 'Pump Game,' aligns with the scam type described in available intelligence, reinforcing its association with crypto fraud. While the exact content and mechanics of the scam are not detailed in the available data, the combination of brand impersonation, low detection threshold, and Cloudflare-backed infrastructure strongly supports its classification as a malicious site.

Defenders should treat this domain as confirmed malicious, particularly in environments where Pump.fun or similar crypto platforms are used. Blocking the domain, IP, and associated SSL certificate (Google Trust Services WE1) is recommended. Given its offline status, monitoring for re-registration or DNS changes is advised, as threat actors frequently re-deploy similar infrastructure. No evidence suggests this domain is part of a broader campaign, but defenders should correlate its indicators with other known Pump.fun impersonation attempts.