nyevent-pump[.]fun

Analysis of nyevent-pump.fun indicates a crypto scam domain impersonating Pump.fun, operational since December 27, 2025, and currently offline. Infrastructure review reveals the domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to Cloudflare IP 172.67.132.236 (AS13335, US). Nameservers point to Cloudflare (brit.ns.cloudflare.com, woz.ns.cloudflare.com), a common pattern for threat actors leveraging Cloudflare’s proxy services to obscure origin infrastructure. No SSL certificate was detected, increasing the likelihood of interception risks for any traffic directed to this domain.

The page title 'Nur einen Moment…' suggests a transient or redirect-oriented design, though the exact content remains unanalyzed. Detection data shows mixed vendor responses: 5 of 93 security vendors on VirusTotal flagged the domain, while AlienVault OTX lists it in one threat intelligence pulse. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. Defenders should treat this domain as high-risk for crypto-related fraud, particularly given its explicit targeting of Pump.fun users.

While the domain is currently offline, historical DNS and WHOIS records should be preserved for forensic purposes. Organizations should monitor for any re-emergence of this domain or related infrastructure, particularly under new Cloudflare IPs or registrant details. No evidence of a phishing kit or specific attack vector is available, but the combination of brand impersonation, Cloudflare hosting, and crypto scam classification justifies elevated scrutiny.