pumpfunfeed[.]click

This domain, pumpfunfeed.click, is flagged as a brand impersonation threat targeting Pump.fun, a decentralized application platform. Analysis indicates the site masquerades as a meme art feed under the page title 'PumpFunFeed — RAW UNFILTERED MEME ART FEED,' likely to deceive users into entering sensitive credentials or interacting with malicious content. No explicit drainer kit signatures were identified, but the domain’s structure and branding align with credential harvesting tactics. Infrastructure analysis reveals the domain was registered on April 15, 2026, through Sav.com, LLC, and resolves to the IP address 188.114.96.3. Security vendor detections on VirusTotal stand at 5/95, with one confirmed appearance on a security blocklist. The domain’s SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites. No Google Safe Browsing (GSB) detections were recorded at the time of analysis, though this may reflect delayed reporting rather than absence of risk. The domain is currently offline, having been taken down following detection. However, residual risk remains due to the potential for infrastructure reuse or re-registration under a similar name. Users who interacted with the site should assume credential exposure and monitor for unauthorized access. Organizations are advised to block the domain and IP at the network level, and to review logs for prior connections to 188.114.96.3. Continuous monitoring for related domains or IP reuse is recommended, as threat actors often repurpose infrastructure for subsequent campaigns.