pump-allocations[.]pages[.]dev

The domain pump-allocations.pages.dev is actively engaged in a brand impersonation campaign targeting Revolut users. Analysis indicates this is a high-risk phishing operation designed to deceive victims into participating in a fraudulent airdrop, as evidenced by the page title 'PUMP FUN | AIRDROP.' The domain remains operational, posing an ongoing threat to individuals seeking cryptocurrency or financial rewards. Infrastructure analysis reveals the domain was registered through Cloudflare, Inc. on November 12, 2025, and resolves to the IPv6 address 2606:4700:310c::ac42:2d08, associated with Cloudflare's US-based autonomous system (AS13335). The absence of an SSL certificate further reduces its legitimacy. Detection metrics show the domain is flagged by 2 of 95 security vendors on VirusTotal, while appearing on two distinct security blocklists. Additional scrutiny by threat intelligence platforms confirms its malicious classification, with active blocking by at least two specialized anti-phishing systems. Current assessment confirms the domain remains active and unmitigated. Users are advised to avoid interaction with pump-allocations.pages.dev and any associated links. Organizations should update web filters to block the domain and its resolving IP address. Financial institutions, particularly those impersonated, are encouraged to issue warnings to customers regarding fraudulent airdrop schemes. Monitoring for similar domains registered under Cloudflare's infrastructure may help preempt further abuse.