pump-fun-airdrop[.]xyz

As of July 23, 2026, the domain pump-fun-airdrop.xyz has been identified as a brand impersonation phishing site targeting Binance. This domain was registered through Web Commerce Communications Ltd on October 31, 2025. The site's page title, 'Wallet Connect Test,' suggests it may be attempting to mimic a legitimate cryptocurrency wallet connection process, which is a common tactic used in crypto scams to deceive users into revealing sensitive information or performing unauthorized transactions. The domain currently resolves to the IP address 172.67.213.21, which is hosted in the United States under Cloudflare, Inc. (AS13335).

The SSL certificate for the domain is WE1, but this does not guarantee the site's legitimacy as phishing sites often use valid certificates to appear more trustworthy. The Gridinsoft trust score for this domain is 0/100, indicating a very low level of trust. The domain appears on one security blocklist, specifically PhishDestroy, which further corroborates its malicious nature. Analysis indicates that 8 out of 93 security vendors on VirusTotal have flagged this domain as potentially dangerous.

The domain's current status is offline, which may indicate that it has been taken down by security measures or the operators have moved their operations. Defenders should remain vigilant and ensure that any systems previously exposed to this domain are thoroughly checked for signs of compromise. Additionally, users should be educated to recognize and report similar brand impersonation attempts, especially those related to cryptocurrency exchanges like Binance. Security teams are advised to monitor for any resurgence of the domain and to implement necessary network and DNS filtering to prevent access.