prize-pump[.]fun

The domain prize-pump.fun was registered on 27 February 2026 through Global Domain Group LLC and resolves to 188.114.97.3, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site returns HTTP 521, indicating a Cloudflare‑origin error, and presents a TLS certificate issued by Let’s Encrypt (E8). The observed page title is “Airdrop Live – Claim Solana token airdrops” and the underlying kit is identified as an Airdrop Scam. The campaign impersonates the legitimate brand Pump.fun, targeting users seeking cryptocurrency airdrops. Reputation services assign a Gridinsoft trust score of 0/100, and 17 of 93 VirusTotal scanners flag the domain as malicious. The domain appears on three public blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. Nameservers are aleena.ns.cloudflare.com and corey.ns.cloudflare.com, confirming Cloudflare’s DNS service. The infrastructure leverages Cloudflare’s reverse‑proxy and HTTP/3 capabilities to obscure origin, consistent with typical crypto‑scam operations. While the page content has not been fully inspected, the combination of brand impersonation, low trust score, and multiple vendor detections indicates a high‑risk threat. Defenders should block the domain at the network perimeter, add it to URL filtering policies, and monitor for related indicators such as IP 188.114.97.3 and the associated nameservers. Ongoing observation is recommended to detect any changes in hosting or new payloads.