# pumpfunvolume-bot-20-may.pages.dev — SUSPICIOUS

> PhishDestroy flags pumpfunvolume-bot-20-may.pages.dev as a brand impersonation site. VirusTotal reports 0/95 detections. Avoid and report immediately.

## Summary
PhishDestroy identifies pumpfunvolume-bot-20-may.pages.dev as an active brand impersonation domain targeting Pump.fun, a popular Solana-based token launch platform. This fraudulent site leverages Pump.fun’s visual identity and branding to deceive users into connecting wallets or signing malicious transactions. The domain is hosted on Cloudflare Pages, resolving to IP 188.114.96.3, and uses a Google Trust Services SSL certificate to appear legitimate. Threat actors commonly deploy such sites to siphon cryptocurrency via crypto drainers or harvest credentials under the guise of legitimate services, making this a high-risk vector for financial loss and data compromise.  

This domain was flagged with a VirusTotal detection ratio of 0 out of 95 scanners at the time of analysis, indicating it remains largely undetected by antivirus engines. Registered through Cloudflare, Inc., the site is hosted on Cloudflare Pages, a legitimate service often abused for phishing due to its fast deployment and masking capabilities. While the domain’s creation date is not specified, its use of a Google Trust Services certificate suggests recent registration. The absence of detections and reliance on trusted infrastructure highlight the sophisticated nature of this campaign, which evades traditional security measures. Users interacting with this domain risk unauthorized wallet connections, token theft, or credential harvesting.  

If you have visited pumpfunvolume-bot-20-may.pages.dev, disconnect your wallet immediately and revoke any unauthorized permissions via your wallet’s settings or tools like Phantom’s “Connected Apps” or Solflare’s “Manage Connections.” Do not interact further with the site. Report the domain to Pump.fun’s official support channels and platforms like Google Safe Browsing or PhishDestroy to aid in blocking. Monitor your wallet for suspicious transactions and consider transferring remaining assets to a newly generated wallet address. Stay vigilant for similar impersonation attempts and verify URLs via official Pump.fun channels before engaging.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Pump.fun

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d3675a1d-c3bf-47f9-8807-0bbcf3501538
- PhishDestroy: https://phishdestroy.io/domain/pumpfunvolume-bot-20-may.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/pumpfunvolume-bot-20-may.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpfunvolume-bot-20-may.pages.dev/
Last updated: 2026-03-26