pumplivecasts[.]fun

This domain is flagged as an elevated-risk crypto drainer phishing site targeting cryptocurrency wallet credentials and automated transaction redirection. Analysis indicates the infrastructure was designed to mimic legitimate token launch platforms, likely exploiting trending meme-coin narratives to deceive victims into connecting wallets to malicious smart contracts. The domain exhibits characteristics consistent with wallet-draining attacks, including the use of JavaScript frameworks commonly employed in fraudulent decentralized application interfaces. Infrastructure analysis reveals the domain was registered on April 11, 2026, through HOSTINGER operations, UAB, and currently resolves to IP address 172.67.183.117 behind Cloudflare proxy services. Security telemetry shows 2 out of 95 vendors on VirusTotal flagging the domain as malicious, while it appears on 3 distinct security blocklists. Detection engines from MetaMask, PhishDestroy, and SEAL have independently blocked this domain. Technical indicators include the use of Node.js, Vue.js, and Nuxt.js frameworks, alongside Cloudflare Browser Insights and HTTP/3 protocol support. The Gridinsoft trust score for this domain is 0 out of 100, indicating maximum risk classification. Mitigation requires immediate blocking of the domain and its resolving IP at network perimeter devices. Security teams should monitor for outbound connections to 172.67.183.117 and inspect endpoint logs for processes initiating HTTP/3 connections to this address. Cryptocurrency wallet users should revoke all smart contract approvals granted during the period of domain activity (April 11, 2026 onward) using a dedicated blockchain explorer tool. Network defenders should deploy signatures to detect Nuxt.js-based application traffic patterns associated with crypto drainer phishing kits, particularly those using Cloudflare proxy services. All credentials potentially exposed through this domain should be considered compromised and rotated immediately.