eligibility-pump[.]fun

Analysis conducted on July 24, 2026 flags eligibility-pump.fun as an elevated‑risk brand‑impersonation site targeting users of Pump.fun. The domain was registered on July 12, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to IP address 172.67.172.156, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No SSL certificate is presented, indicating that traffic to the site would be unencrypted. The single page that was observed returns the title "Pieni hetki...", a generic message that offers no further context about the page’s purpose.

Reputation services assign extremely low trust scores: Scamadviser rates the domain 1 / 100 and Gridinsoft 0 / 100, reinforcing the likelihood of malicious intent. VirusTotal scans show that seven of ninety‑five security vendors flagged the domain, and AlienVault OTX lists it in one threat‑intel pulse, demonstrating that the infrastructure has attracted multiple independent detections. The site appears on one public blocklist and has been taken offline by the PhishDestroy takedown service, confirming that it was actively used for malicious activity before removal.

The documented scam type is a crypto‑related fraud, and the domain explicitly impersonates the legitimate Pump.fun brand. Defenders should continue to block eligibility-pump.fun at DNS and proxy layers, add its IP 172.67.172.156 to any network‑wide deny lists, and monitor for newly registered domains that share the "pump.fun" pattern or leverage the same registrar. Ongoing vigilance against Cloudflare‑hosted payloads linked to low‑trust domains is recommended, as the hosting provider can be leveraged to serve a variety of short‑lived phishing or crypto‑draining campaigns.