Análisis de phishing y seguridad de pump.7drop.top

Analysis of pump.7drop.top shows a recently registered domain created on February 21, 2026 that is currently offline. The site presented the page title "PUMP FUN | AIRDROP," indicating a crypto‑related lure. Infrastructure inspection reveals that the domain resolves to 172.67.150.53, an address owned by AS13335 Cloudflare, Inc., located in the United States. The SSL certificate presented is identified as WE1, which is typical for short‑lived malicious deployments.

Reputation signals are uniformly negative: Gridinsoft assigned a trust score of 0 out of 100, and the domain is listed on a security blocklist with PhishDestroy confirming the classification. VirusTotal scans reported four detections out of ninety‑three vendors, reinforcing the malicious assessment. The observed phishing kit is catalogued as an "Airdrop Scam," aligning with the crypto‑scam theme. While the page title and kit provide concrete evidence of a crypto‑airdrop lure, the exact content of the landing page, including any credential‑capture forms or malicious payloads, has not been captured because the site was taken offline before a full scrape could be completed.

Defenders should immediately block pump.7drop.top at perimeter firewalls and proxy filters, add the associated IP address 172.67.150.53 to deny lists, and monitor for any new subdomains under the 7drop.top zone that resolve to the same Cloudflare ASN. Continuous threat‑intel feeds should be consulted for any emerging indicators related to the Airdrop Scam kit, and organizations should educate users about unsolicited airdrop offers that reference "pump" or similar terminology. Given the low trust score, blocklist presence, and multiple vendor detections, the domain warrants an elevated risk posture despite its offline status.