claim[.]pumpswaps[.]fun

The domain claim.pumpswaps.fun was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 172.67.204.180, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The site presented a page titled "PUMP | Solana Meme Token," indicating a cryptocurrency pump-and-dump scheme that attempts to masquerade as the DexScreener analytics platform. Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser reports a score of 1 out of 100.

The SSL certificate is identified only as "WE1," suggesting a self‑signed or otherwise untrusted certificate. VirusTotal analysis shows that five of ninety‑three antivirus engines flagged the domain as malicious, and the domain appears on a single external blocklist, specifically PhishDestroy, which has already blocked the host. The only confirmed malicious behavior is the brand impersonation of DexScreener to lure users into a crypto scam.

No additional indicators such as JavaScript payloads, credential‑stealing forms, or redirect chains have been disclosed. Defenders should immediately add claim.pumpswaps.fun to URL filtering policies, block the associated IP range 172.67.204.180, and monitor for newly registered subdomains under pumpswaps.fun that reference DexScreener or Solana tokens. Continuous observation of VirusTotal and other multi‑engine scanners is recommended to capture any changes in detection status, and threat‑intel feeds should be updated to reflect this brand‑impersonation activity.