pumpgame[.]lol

Analysis indicates that pumpgame.lol was registered on 23 November 2025 through PublicDomainRegistry.com (operated by PDR Ltd.). The domain resolves to 172.67.132.237, an address owned by Cloudflare (AS13335) located in the United States. Cloudflare services are confirmed by the presence of the nameservers jay.ns.cloudflare.com and nicole.ns.cloudflare.com and the detection of HTTP/3 support. The site presented the page title “Pump Game” and was served over TLS using a certificate issued by Google Trust Services under the WE1 root, indicating a valid SSL chain.

VirusTotal scans show that five out of ninety‑five antivirus and URL scanning engines flagged the domain as malicious, and the URL appears on at least one public blocklist. PhishDestroy has also listed the domain as blocked. The current HTTP status is offline, meaning the site is not reachable at the time of assessment. The combination of a recent registration, Cloudflare‑hosted infrastructure, a legitimate‑looking SSL certificate, and multiple security vendor detections aligns with typical characteristics of generic phishing campaigns that exploit trust in popular services.

However, no additional content analysis, such as page markup or credential‑capture forms, is available, and the specific phishing lure or targeted brand beyond the generic title “Pump Game” remains unknown. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑hosting attempts, and update detection signatures with the observed indicators, including the domain name, IP address, nameserver pair, and TLS certificate fingerprint. Incident response teams should also consider adding the domain to internal blocklists and reviewing any recent logs for connections to 172.67.132.237 to identify potential exposure.