pump-streamerchat[.]fun

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

This domain, pump-streamerchat.fun, is identified as a confirmed brand impersonation site specifically targeting users of the Pump cryptocurrency platform. Analysis indicates the site is designed to mimic legitimate Pump-related services, likely deploying crypto drainer scripts to siphon digital assets from victims' wallets upon interaction. The site presents itself under the page title 'Pump,' further solidifying its intent to deceive users into believing they are engaging with authentic Pump infrastructure. Given the elevated risk level and historical targeting of cryptocurrency users, this domain represents a significant threat to individuals unaware of its malicious nature. Evidence supporting this assessment includes detection by 5 out of 95 security vendors on VirusTotal, alongside inclusion on four distinct security blocklists. The domain was registered on May 12, 2024, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to the IP address 188.114.97.3, a Cloudflare-protected endpoint, which is commonly exploited to obfuscate malicious activity. Additional technical indicators include the use of Node.js, Vue.js, Nuxt.js, and Cloudflare Browser Insights, suggesting a sophisticated frontend designed to evade basic detection mechanisms while maintaining operational security. Users who have visited pump-streamerchat.fun or interacted with its content are advised to take immediate action to mitigate potential compromise. First, disconnect any active wallet connections associated with the site and revoke permissions for all suspicious smart contracts via blockchain explorers. Second, scan local devices for malware using updated security tools to detect and remove any residual threats. Finally, monitor wallet activity for unauthorized transactions and consider migrating assets to a new wallet if signs of compromise are detected. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Pump or other cryptocurrency platforms.