pump[.]fun-wallet-apiv3[.]com

The domain pump.fun-wallet-apiv3.com was created on February 21, 2026 and is presently taken offline. Technical indicators show that the domain is listed on two independent security blocklists, specifically PhishDestroy and ScamSniffer, which classify it as a brand‑impersonation vector targeting the Pump.fun service. The page title returned by the HTTP response is identical to the fully qualified domain name, providing no additional context beyond the host itself.

A Gridinsoft trust assessment assigns a score of 0 out of 100, indicating a complete lack of reputation and a high likelihood of malicious activity. VirusTotal scans report that two of ninety‑three antivirus engines flagged the domain, reinforcing the suspicion of malicious intent. The intelligence explicitly labels the activity as a crypto scam, suggesting that the operator may have attempted to lure victims into submitting cryptocurrency wallet credentials or performing transfers under the guise of a Pump.fun API endpoint.

Because the site is currently offline, direct content analysis is unavailable, leaving details such as hosting provider, IP address, TLS configuration, and exact payload unknown. Defenders should treat the domain as hostile: add the FQDN to perimeter blocklists, ensure that any internal DNS resolver returns NXDOMAIN or a sinkhole response, and monitor for re‑registration or the appearance of similar subdomains that reuse the "pump.fun‑wallet‑apiv3" pattern. Continuous telemetry from blocklist feeds and endpoint security solutions should be correlated to detect any residual artifacts or attempts to contact the domain before it was taken down.