postnpump[.]fun

This domain, postnpump.fun, was registered on August 11, 2025 through NameCheap, Inc. and uses the authoritative name servers dns1.registrar-servers.com and dns2.registrar-servers.com. The site resolves to IP address 216.198.79.1, which belongs to AS16509 operated by Amazon.com, Inc., and the host location is the United States. The TLS certificate is issued by Let’s Encrypt (R13) and the site presents HTTP 307 redirects, indicating a forced redirection to another resource. Infrastructure fingerprints show the use of Vercel and HTTP Strict Transport Security (HSTS). The page title returned by the server is “BangerBoi - Trade Social Media Posts on the Blockchain”, which aligns with a crypto‑related narrative. The domain is classified as a high‑risk brand‑impersonation campaign targeting Pump.fun and is described as a crypto scam. Gridinsoft assigns a trust score of 0/100, and the domain appears on a single security blocklist, currently blocked by PhishDestroy. VirusTotal scans report 2 of 95 security vendors flagging the domain, indicating a modest detection rate. The campaign is active as of the report date. Defenders should treat any traffic to postnpump.fun as malicious, enforce blocking at network perimeter, monitor for connections to the associated IP and ASN, and consider adding the domain to internal blocklists. Continuous observation of any changes to the TLS certificate, redirection behavior, or additional detections is advised, as the current evidence points to a credential‑harvesting or fund‑diversion operation leveraging the Pump.fun brand.