pumd[.]fun

This domain, pumd.fun, is identified as a high-risk brand impersonation threat specifically targeting users of the Pump.fun cryptocurrency platform. Analysis indicates the domain is designed to mimic the legitimate Pump.fun interface, likely to harvest user credentials, private keys, or facilitate unauthorized token transfers. The page title "pump" further corroborates the intent to deceive users into believing they are interacting with the authentic service, increasing the risk of financial loss or account compromise. Infrastructure analysis reveals multiple red flags: the domain is flagged by 14 out of 95 security vendors on VirusTotal, appears on 4 distinct security blocklists, and is actively blocked by MetaMask, PhishDestroy, SEAL, and Maltrail. Registered through DYNADOT LLC on February 20, 2026, the domain resolves to the IP address 104.21.47.242 and was previously listed in one AlienVault OTX threat intelligence pulse. The Gridinsoft trust score of 0/100 and the use of a Google Trust Services SSL certificate further underscore its malicious nature, despite the certificate's legitimacy. Users who have visited pumd.fun or interacted with its content should immediately revoke any connected wallet permissions and monitor their accounts for unauthorized transactions. It is recommended to perform a full security audit of any devices used to access the domain, including scanning for malware or keyloggers. Affected individuals should also report the incident to their cryptocurrency exchange or wallet provider and consider rotating passwords or private keys associated with the compromised session. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts targeting Pump.fun or other cryptocurrency platforms.