pumpfunairdrop[.]com

pumpfunairdrop.com is a fraudulent domain that impersonates the legitimate Pump.fun brand to deceive users into believing they are visiting an official airdrop platform. The threat type is brand impersonation, likely designed to harvest credentials, seed phrases, or other sensitive information from cryptocurrency users. The domain was registered through NameCheap, Inc. on November 24, 2024, and resolves to IP address 198.54.115.74. Its page title, 'Default Web Site Page,' indicates the site was either never fully configured or was quickly taken offline after detection.

Technical analysis reveals that the domain currently appears on 1 security blocklist and has a VirusTotal detection ratio of 1 out of 95 security vendors, confirming low but present malicious recognition. The Gridinsoft trust score is 0 out of 100, reflecting complete lack of credibility. The domain has been taken offline by PhishDestroy, but its short active window—created just over a month ago—suggests it was part of a targeted campaign against Pump.fun users. The use of NameCheap, a common registrar for low-reputation domains, further supports its fraudulent nature.

Users who visited pumpfunairdrop.com should immediately change any passwords or credentials entered on the site, revoke any wallet permissions granted, and monitor their accounts for unauthorized activity. Run a full security scan on any device used to access the domain. Report the domain to relevant cybersecurity authorities and consider enabling two-factor authentication on all crypto-related accounts. No legitimate airdrop from Pump.fun would be hosted on this domain, and any interaction should be treated as a potential compromise.