pumpfun-booster[.]com

This domain, pumpfun-booster.com, is identified as a brand impersonation threat targeting users of the legitimate Pump.fun platform through a fabricated airdrop scheme. Analysis indicates the site was designed to deceive visitors into believing they were participating in an official token distribution event, likely harvesting wallet credentials or private keys under false pretenses. The page title, 'PUMP FUN | AIRDROP,' directly mimics Pump.fun's branding to exploit user trust and urgency associated with limited-time crypto distributions.

Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on March 24, 2026, through Name SRS AB, with a suspiciously future-dated creation timestamp suggesting potential registrar abuse or domain squatting. It resolves to IP address 172.67.203.152, a Cloudflare-hosted endpoint that has been flagged by 3 independent security blocklists, including MetaMask and SEAL. VirusTotal detection metrics show 3 out of 95 security vendors classify the domain as malicious, with behavioral signatures matching known cryptocurrency phishing kits. The site employed Node.js, Vue.js, and Nuxt.js frameworks, which are frequently leveraged in modern phishing infrastructure for dynamic content delivery and obfuscation.

Users who visited pumpfun-booster.com should assume their wallet credentials or private keys may have been compromised. Immediate actions include revoking all active token approvals through a blockchain explorer, transferring assets to a new wallet, and monitoring transaction history for unauthorized activity. Browser data should be cleared to remove any stored session tokens or cached malicious scripts. Given the domain's elevated risk profile and confirmed offline status, affected users are advised to report the incident to relevant crypto security teams for further forensic analysis and potential takedown coordination.