pumpgame[.]top

Analysis conducted on July 25, 2026 identifies pumpgame.top as an elevated‑risk generic phishing domain that has been taken offline. The domain was registered on November 21, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The hosting service is Cloudflare, with HTTP/3 enabled and the TLS certificate issued by Google Trust Services under the WE1 label.

The authoritative nameservers are jay.ns.cloudflare.com and nicole.ns.cloudflare.com. VirusTotal scans show that three of ninety‑five security vendors flagged the domain, indicating malicious activity. In addition, the domain is listed on a security blocklist and has been actively blocked by the PhishDestroy platform.

The page title returned by the now‑offline site is “Pump Game”, but no further page content has been captured, leaving the exact phishing payload unconfirmed. Given the combination of a recent registration, Cloudflare‑based infrastructure, a Google‑issued certificate, and multiple vendor detections, defenders should continue to enforce blocklist rules for pumpgame.top, monitor DNS queries for the associated Cloudflare nameservers, and consider adding the domain to internal URL filtering and email gateway denial lists. Ongoing observation is advised in case the site becomes active again or is repurposed for other malicious campaigns.