pump-fun-en[.]pages[.]dev

The domain pump-fun-en.pages.dev is an impersonation scam targeting the brand Pump.fun. Detected on the same day it was created, March 28, 2026, it quickly garnered attention due to its malicious intent. VirusTotal flags the domain as malicious by 2 out of 94 vendors, and it is listed on 1 public blocklist, specifically PhishDestroy. Currently, the site is offline, reducing immediate risk but highlighting the need for awareness of such threats.

Registered and hosted by Cloudflare, Inc., the domain took advantage of Cloudflare's infrastructure to launch its phishing campaign. The hosting IP, located in Canada, is part of Cloudflare's network, and the SSL certificate was issued by Google Trust Services. This setup suggests a sophisticated attempt to lend credibility to the fraudulent site by using reputable service providers.

Despite its brief operational period, the domain's platform risk score of 61/100 indicates a moderate threat level. The swift detection by PhishDestroy underscores the importance of early identification in mitigating potential damage. Phishing domains like pump-fun-en.pages.dev exploit the critical window between domain registration and widespread recognition by antivirus databases, emphasizing the need for proactive threat intelligence measures.