pump[.]fund

This domain, pump.fund, is actively impersonating Pump.fun, a known cryptocurrency platform, as confirmed by its presence on three security blocklists and its classification as a crypto scam. Infrastructure analysis reveals the domain is hosted on IP 145.223.19.115 (AS47583, Hostinger International Limited, India) and was registered through Name.com, Inc. The site resolves with an HTTP 200 status and displays the page title 'Nur einen Moment…', which may indicate a temporary holding page or redirection mechanism. SSL certification is provided by Let's Encrypt (E8), a common but not inherently malicious provider. The domain is flagged by 12 of 95 security vendors on VirusTotal, with additional detections from PhishDestroy, ScamSniffer, and Enkrypt. AlienVault OTX records show the domain in 23 threat intelligence pulses, suggesting widespread recognition as malicious. Detected technologies include Ubuntu, Nginx, and Appsflyer, which are legitimate but frequently abused in phishing infrastructure. Nameservers are consistent with Name.com's infrastructure (ns1qsy.name.com, ns2ckr.name.com, etc.). No specific attack chain or payload has been confirmed, but the domain's classification as a crypto scam aligns with common tactics targeting cryptocurrency users. Defenders should treat this domain as high-risk and block it at the network level, particularly in environments where Pump.fun or similar platforms are accessed. Further analysis of the site's content is required to determine exact redirection targets or payload delivery mechanisms, but current indicators justify immediate containment.