chatstreampump[.]fun

PhishDestroy identifies chatstreampump.fun as a malicious domain engaging in brand impersonation targeting Pump.fun, a popular Solana-based token launch platform. This domain was flagged by 1 out of 95 security vendors on VirusTotal, indicating a high likelihood of malicious activity despite low initial detection rates. The domain resolves to IP 172.67.141.170, was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 13, 2026, and has already been blocked by MetaMask and the SEAL security system. Additionally, it appears on two separate security blocklists, further corroborating its malicious nature.

Technical analysis reveals the domain employs a Let's Encrypt SSL certificate to appear legitimate, while its creation date of April 13, 2026 (a future date that may indicate timestamp manipulation) suggests a hastily deployed campaign. The page title 'Pump' is identical to Pump.fun's branding, demonstrating clear intent to deceive visitors through visual imitation. The domain's registration via a public domain registry indicates low operational security from the threat actor, which is common in automated or low-effort impersonation campaigns.

Users who have visited chatstreampump.fun should immediately cease any interaction with the site, especially if any credentials or Solana wallet connections were entered. Monitor wallet transactions for unauthorized activity and revoke any connected permissions through platforms like Solscan or Phantom wallet's connection manager. If funds were stolen, file a report with local law enforcement and the FBI's IC3. Always verify URLs through official channels before engaging with cryptocurrency platforms, and consider using hardware wallets for enhanced security against such impersonation attacks.