events-pump[.]fun

The domain events-pump.fun was registered on September 27, 2025 through NameSilo, LLC and is currently taken offline. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is served by the Cloudflare nameservers ligia.ns.cloudflare.com and steven.ns.cloudflare.com, indicating that the attacker leveraged Cloudflare’s edge network to hide the true origin of the web server. No TLS certificate was observed for the site, meaning any HTTP connection would have been unencrypted.

The page title returned by the server was "Nur einen Moment…", a German phrase meaning "Just a moment…", but no further page content has been disclosed. The threat is classified as a crypto scam that impersonates the legitimate brand Pump.fun, as indicated by the "Impersonates" field and the "Scam type" label. The domain appears on a single security blocklist and has been specifically blocked by PhishDestroy. A Gridinsoft trust score of 0 out of 100 reflects an extremely low reputation.

VirusTotal analysis shows that one out of ninety‑five scanning engines flagged the domain, confirming at least minimal detection by security vendors. Given the combination of a brand‑targeted crypto lure, the use of reputable CDN infrastructure, lack of TLS, and the low trust score, the domain should be treated as malicious. Defenders are advised to add events-pump.fun to local deny lists, monitor the associated Cloudflare IP range for similar activity, and consider broader threat‑intel sharing with peers. Continuous re‑evaluation is recommended, as the offline status may change and additional indicators could emerge.