pumpsols[.]com

Analysis of pumpsols.com, created on July 15, 2025 and presently taken offline, reveals infrastructure consistent with a crypto‑related phishing operation. The domain resolves to IP address 172.67.159.139, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. No SSL certificate is presented, indicating that any HTTP connections would be unencrypted. An HTTP request to the site returned a 200 OK status, and the page title observed was the Hebrew phrase "רק רגע...".

The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and its authoritative name servers are brenda.ns.cloudflare.com and ivan.ns.cloudflare.com. VirusTotal reports that the domain has been scanned by 95 antivirus and URL‑reputation engines, none of which flagged it at the time of analysis; this lack of detection does not constitute a safety guarantee. The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy service, confirming that security operators have identified it as malicious.

While the exact phishing landing page content has not been captured, the classification as a "Crypto Scam" aligns with the observed indicators and the use of a generic, non‑localized title. Defenders should continue to block traffic to pumpsols.com at the network perimeter, monitor for any future re‑hosting of the domain or its associated IP range, and update URL filtering policies to include the domain and its Cloudflare‑hosted address. Additional investigation should focus on any related subdomains or newly observed C2 infrastructure that may emerge if the operators attempt to reactivate the site.