degenpump[.]top

Analysis of the domain degenpump.top, registered on May 06, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com, confirms that it is actively engaged in a high-risk brand impersonation scam targeting Binance. The domain resolves to the IP address 185.158.133.1, which is located in Poland and is part of the AS13335 Cloudflare, Inc. network. The site employs an SSL certificate issued by Let's Encrypt, indicating a basic level of security to potentially mislead users into believing the site is legitimate. The domain is flagged by PhishDestroy, a security blocklist, and has a low Gridinsoft trust score of 11 out of 100, further corroborating its malicious nature. The HTTP status code of 301 suggests that the domain is redirecting users to another location, which could be part of the scam’s strategy to lead unsuspecting visitors to a fraudulent site. Defenders should take immediate action to block this domain and educate users about the risks associated with visiting or interacting with degenpump.top. Additional investigation is recommended to identify the final destination of the redirect and to monitor for any changes in the domain’s infrastructure or behavior. The exact content of the site, as suggested by the page title 'DegenPump - Automated Crypto Pump Signals with 98% Accuracy,' indicates that the site claims to provide automated cryptocurrency pump signals, a common tactic in cryptocurrency scams to lure victims into making investments based on false or misleading information. While the domain is currently active, the use of technologies such as HSTS and Cloudflare may make it more resilient to takedown efforts, highlighting the need for ongoing vigilance and proactive measures to protect potential victims from financial loss.