sunpump-meme[.]org

This domain, sunpump-meme.org, is assessed to pose an elevated risk as a generic phishing site, specifically targeting users interested in launching meme coins on the TRON blockchain. The threat is designed to deceive users into sharing sensitive information, such as wallet keys or personal data, which can lead to financial loss or identity theft.

Analysis indicates that this domain is flagged by 4 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus on its malicious nature. The domain was registered through GoDaddy.com, LLC on February 28, 2026, and resolves to the IP address 186.2.175.35. It is currently offline and appears on 3 security blocklists, including those maintained by MetaMask, PhishDestroy, and SEAL. The SSL certificate is issued by Let's Encrypt, a common choice for phishing sites due to its ease of acquisition. The domain has been mentioned in 2 threat intelligence pulses on AlienVault OTX, further corroborating its involvement in malicious activities. Additionally, Gridinsoft has assigned a trust score of 0/100, indicating a complete lack of trustworthiness. Technologies detected on the site include Modernizr and DDoS-Guard, which can be used to enhance the site's appearance and resilience against takedown efforts.

To mitigate the risks associated with this domain, users are advised to avoid clicking on any links or entering personal information on any site that claims to be related to SunPump-meme.org. Network administrators should consider blocking the IP address 186.2.175.35 and adding the domain to their firewall or DNS blocklists. Security teams should monitor for any additional domains registered through the same registrar or IP address, as they may be part of a larger phishing campaign. Regularly updating security software and educating users about the signs of phishing attacks can also help prevent successful compromises.