beta-pump[.]fun

The domain beta-pump.fun was registered on May 24, 2026 through TUCOWS.COM, CO. It resolves to the Cloudflare‑owned address 172.67.136.98, which is announced by AS13335 Cloudflare, Inc. and geolocated to the United States. The site presents an HTTPS certificate issued by Let’s Encrypt (E7) and uses the Cloudflare DNS nameservers anirban.ns.cloudflare.com and zainab.ns.cloudflare.com. Technical fingerprints show a Node.js runtime with the Express framework, supplemented by Cloudflare Browser Insights and generic Cloudflare services. An HTTP 301 redirect is observed and the page title returned is "Pumpfun — Elite Beta v0.1". The domain is classified as a brand‑impersonation campaign targeting the legitimate Pump.fun service. VirusTotal analysis reports 16 of 91 security vendors flagging the domain, and it appears on three external blocklists, with active blocking by PhishDestroy, MetaMask, and SEAL. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. While the content of the landing page has not been independently verified, the convergence of registration timing, infrastructure choice, brand targeting, and multiple vendor detections indicate a high‑risk, active threat. Defenders should block the domain at network perimeters, monitor DNS queries for the associated IP and nameservers, and update endpoint detection rules to include the observed signatures. Ongoing observation is advised to capture any evolution of payloads or additional infrastructure tied to the campaign.