pump-streams[.]fun

This domain, pump-streams.fun, is identified as a cryptocurrency credential harvesting platform designed to deceive users into disclosing wallet credentials, seed phrases, or private keys. Such sites often mimic legitimate cryptocurrency services, exchanges, or wallet interfaces to trick victims into entering sensitive information, which attackers then exploit to drain digital assets. The site's infrastructure and content are engineered to appear authentic, leveraging modern web technologies to evade casual detection while targeting users engaged in cryptocurrency transactions or investments. Analysis indicates the domain was registered on May 03, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.67.208.38 and is currently flagged by 8 out of 95 security vendors on VirusTotal, including specialized cryptocurrency security tools. The domain appears on four security blocklists and is actively blocked by multiple threat intelligence platforms. Detected technologies include Node.js, Vue.js, Nuxt.js, and Cloudflare services, which are commonly used to obfuscate malicious infrastructure and enhance site performance, complicating forensic analysis. If you visited pump-streams.fun or entered any credentials, immediately disconnect the affected device from the internet to prevent further data exfiltration. Revoke access to any cryptocurrency wallets or services linked to the site and transfer remaining assets to a new, secure wallet. Monitor all connected accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant cryptocurrency platforms and local cybersecurity authorities to aid in tracking the threat. Avoid reusing passwords or credentials exposed to this domain, as attackers may attempt to leverage them across other services.