getting-started-pumpswap[.]pages[.]dev

This domain, getting-started-pumpswap.pages.dev, is actively engaged in brand impersonation targeting the Solana blockchain platform. Analysis confirms the domain is currently active and designed to mimic the legitimate PumpSwap decentralized exchange interface, as indicated by its page title, 'PumpSwap: Decentralized Exchange on Solana.' The intent appears to deceive users into interacting with fraudulent infrastructure under the guise of an official Solana-associated service. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc., and resolves to the IP address 172.66.45.23, hosted in Canada under Cloudflare’s network. The domain was created on April 18, 2026, and is currently flagged by 1 of 95 security vendors on VirusTotal. Additionally, it appears on one security blocklist, with its SSL certificate issued by Google Trust Services (WE1). Despite these indicators, the domain remains operational and has not been widely detected by security platforms. Organizations and users are advised to block access to this domain and its associated IP address immediately. Network-level protections should be implemented to prevent interaction with the domain, particularly in environments where Solana-related services are utilized. Continuous monitoring for similar domains registered under Cloudflare’s infrastructure is recommended, as this pattern may indicate a broader campaign targeting cryptocurrency users. Security teams should correlate this activity with other brand impersonation indicators to identify potential follow-on threats.