token-pulse[.]fun

This domain is flagged as a brand impersonation site targeting DexScreener, a cryptocurrency data platform. Registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain was found offline as of the July 24, 2026 report date. Infrastructure analysis reveals the domain uses Cloudflare nameservers (dina.ns.cloudflare.com and mustafa.ns.cloudflare.com) and resolves to IP address 188.114.97.3, which is hosted in the United States under AS13335 (Cloudflare, Inc.). The domain lacks an SSL certificate, a common indicator of low-effort phishing setups.

The page title 'Token Pulse — Solana' suggests the site was designed to appear as a legitimate Solana-focused analytics tool, likely to harvest credentials or wallet information from visitors expecting DexScreener functionality. Threat detection data shows the domain appears on one security blocklist (PhishDestroy) and is flagged by 2 of 93 security vendors on VirusTotal, indicating moderate but not universal recognition of its malicious nature. The domain's status as offline may reflect either a short-lived campaign or a successful takedown action. The exact content of the page was not captured, so the specific phishing mechanism (e.g., wallet connect prompts, seed phrase harvesting, or login credential theft) remains unconfirmed.

Defenders should ensure any historical DNS or HTTP artifacts from this domain are added to blocklists, particularly for environments monitoring Solana ecosystem threats. Organizations using DexScreener should alert users that token-pulse.fun is an unauthorized impersonation and advise against interacting with any related links or emails. Ongoing monitoring for similar domain registrations using patterns like 'token-pulse' or 'pulse' combined with crypto brand names is recommended, as the registrar and hosting provider patterns suggest a repeatable phishing infrastructure.