pumpexperience[.]fun

Analysis of pumpexperience.fun confirms it was a brand-impersonation domain targeting Pump.fun, a cryptocurrency platform. The domain was registered on June 7, 2025, through Go Daddy, LLC, and resolved to IP 72.167.207.85, hosted on AS26496 (GoDaddy.com, LLC) in the United States. No SSL certificate was present. The page title, 'Pumpfun Experience,' closely mirrors the legitimate brand name, reinforcing its impersonation intent. Security vendors flagged the domain on VirusTotal, with 15 out of 93 engines detecting malicious activity.

It appeared in one AlienVault OTX threat intelligence pulse and was listed on a single security blocklist. PhishDestroy had previously blocked the domain, classifying it as a crypto scam. Infrastructure analysis reveals the use of GoDaddy nameservers (ns55.domaincontrol.com and ns56.domaincontrol.com). As of July 23, 2026, the domain is offline, though its prior hosting and detection history warrant continued monitoring.

Defenders should treat this domain as confirmed malicious infrastructure. While offline, the registration and hosting details suggest potential for re-emergence under similar configurations. Network-level blocking of the resolved IP (72.167.207.85) and monitoring of newly registered domains with comparable naming patterns (e.g., 'pump' + action words) are recommended. No evidence of a phishing kit or specific payload is available, limiting further technical attribution.