pumpblog[.]net

pumpblog.net was registered on December 6, 2024 through NameCheap, Inc. The domain resolves to the IPv4 address 185.199.109.153, which is assigned to AS54113 Fastly, Inc. and geolocated to the United States. Nameserver delegation points to dns1.registrar-servers.com and dns2.registrar-servers.com. No TLS certificate is presented, indicating that the site was served over plain HTTP or that HTTPS was not configured before takedown. The page title returned from the site, “Pump.fun Blog”, does not contain the targeted brand name, but the intelligence set lists Solana as the impersonated brand and classifies the activity as a crypto‑related scam. The domain appears on a single security blocklist and is currently blocked by PhishDestroy.

VirusTotal analysis shows that 12 of 95 scanned security vendors flagged the domain, reinforcing the malicious assessment. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. As of the report date (July 23, 2026) the site is offline, and the risk level is marked elevated. The combination of recent registration, use of a reputable CDN provider, lack of HTTPS, low trust score, and multiple vendor detections indicates a deliberate attempt to harvest credentials or funds by masquerading as a Solana‑related service. However, the exact phishing payload, URL paths, or content have not been captured, leaving the precise lure and victim interaction unknown.

Defenders should add pumpblog.net to their deny‑list and ensure that any outbound connections to the associated IP address are blocked. Monitoring of Fastly edge nodes for similar newly‑registered domains can help catch future impersonation attempts. Because the domain was registered through NameCheap, investigators may request registration records for further attribution. Continuous re‑scanning of the domain, if it returns online, is advised to capture any evolving malware or phishing kits.