dash-pump[.]fun

Analysis as of July 24, 2026 confirms that the domain dash-pump.fun was registered on July 13, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and currently resolves to the IP address 104.21.96.1, which belongs to Cloudflare, Inc. (AS13335) in the United States. The site presents a page title reading "Nur einen Moment…" and does not serve an SSL/TLS certificate, leaving the HTTP connection unencrypted. Infrastructure assessment shows a single name server configuration, and the domain carries a Gridinsoft trust score of 0 out of 100, indicating a high likelihood of malicious intent.

The domain is listed on at least one security blocklist, specifically PhishDestroy, and has been flagged by one of ninety‑five security vendors on VirusTotal, reinforcing the suspicion of abuse. The primary threat vector is a brand impersonation campaign targeting Pump.fun, classified as a crypto‑related scam. While the exact payload or phishing workflow has not been publicly disclosed, the combination of a low trust score, blocklist inclusion, and vendor flagging provides sufficient evidence for defensive action.

Defenders should add dash-pump.fun to network and endpoint blocklists, enforce TLS inspection to capture any unencrypted traffic, and monitor for additional domains that resolve to the same Cloudflare IP range and exhibit similar registration patterns. Continuous brand monitoring for Pump.fun is recommended to detect future impersonation attempts. Given the offline status of the site, immediate takedown is not possible, but proactive blocking will mitigate potential user exposure should the domain become active again.