pumpairdrops[.]fun

The domain pumpairdrops.fun is a phishing site engaged in brand impersonation targeting Discord users. It presented itself as a cryptocurrency airdrop portal under the false pretense of a 'Pump.fun - Airdrop', attempting to deceive visitors into connecting wallets through wallet_connect_phish tactics. No drainer kit was identified, but the site posed an elevated risk for credential theft or unauthorized wallet access. As of the latest verification, pumpairdrops.fun has been taken offline.

Technical indicators confirm the malicious nature of pumpairdrops.fun. The domain was flagged by 3 of 95 VirusTotal security vendors, including CRDF, Gridinsoft (trust score 0/100), and Trustwave. It appeared on 1 security blocklist (PhishDestroy) and was registered through NameCheap, Inc. on July 10, 2025. The site resolved to IP address 67.223.118.190 (US, AS22612 Namecheap, Inc.) and lacked an SSL certificate. The observed page title was 'Pump.fun - Airdrop', and the domain used a single nameserver.

Victims of pumpairdrops.fun should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. If credentials or wallet details were entered, change passwords for all associated accounts, enable two-factor authentication, and monitor for unauthorized transactions. Report the phishing domain to Discord’s trust and safety team, as well as to platforms like PhishTank or Google Safe Browsing to aid in broader mitigation efforts.