pump-f2c[.]pages[.]dev

This domain pump-f2c.pages.dev is identified as a brand impersonation threat targeting Pump.fun. The site presents itself as a "Pump.fun - Airdrop" page, which is commonly used in deceptive schemes designed to trick users into connecting wallets or approving malicious transactions. The primary risk is unauthorized crypto asset drainage through impersonated airdrop claims or fake reward mechanisms.

Technical indicators confirm malicious suspicion based on multiple data points. VirusTotal analysis shows 1/95 security vendors flagging the domain. The domain was created on July 11, 2025 and is currently still active. Infrastructure is associated with Cloudflare Pages, and it resolves to IP address 188.114.96.3. Security telemetry indicates the domain appears on 1 security blocklist and has been actively blocked by PhishDestroy. SSL is issued via Google Trust Services (WE1), which may provide a false sense of legitimacy despite malicious intent.

If a user has visited this domain, immediate actions should be taken to secure digital assets. Users should disconnect any connected wallets, revoke token approvals, and transfer remaining assets to a known safe wallet if compromise is suspected. Credentials should not be entered into the site under any circumstance. Browser history and extensions related to crypto interactions should be reviewed for unauthorized permissions. Due to its active status, impersonation of Pump.fun, and presence on security blocklists, the domain should be treated as a live threat until fully decommissioned.