pump[.]fun[.]ong

Analysis of pump.fun.ong conducted on July 24 2026 indicates that the domain was registered through NameCheap on February 21 2026. The domain resolves to IP 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is served by Cloudflare authoritative nameservers molly.ns.cloudflare.com and sage.ns.cloudflare.com, confirming that the infrastructure relies on Cloudflare’s edge network and supports HTTP/3. The HTTPS endpoint presents a certificate issued by Google Trust Services under the WE1 root, showing a valid TLS chain despite the malicious intent. The site returned a HTTP 502 Bad Gateway response, and the page title captured during the scan reads "fun.ong | 502: Bad gateway".

No content beyond this error page was retrieved, and the domain is currently taken offline. Threat intelligence flags the domain as a brand impersonation campaign targeting the legitimate Pump.fun service, and the scam type is identified as a crypto scam. VirusTotal scans show nine of ninety-five security vendors flagging the domain as malicious. Independent blocklists PhishDestroy and ScamSniffer have already listed the domain, providing additional corroboration of its abusive nature. Evidence is limited to infrastructure and metadata; no payload, phishing page, or credential-capture details have been observed.

Consequently, the exact mechanism used to lure victims remains uncertain, though the association with a crypto-related scam suggests attempts to solicit cryptocurrency payments or private keys. Defenders should block the domain at DNS and proxy layers, monitor for connections to the IP address 188.114.97.3, and update intrusion-detection signatures to include the observed Cloudflare nameserver pattern. Because the TLS certificate is valid, reliance on certificate pinning alone will not prevent exposure.