pump-livestream[.]fun

This domain, pump-livestream.fun, is identified as a cryptocurrency credential harvesting site designed to mimic legitimate live trading or token-pumping platforms. Analysis indicates the site targets users by presenting fraudulent interfaces that prompt visitors to enter wallet credentials, private keys, or seed phrases under the guise of accessing exclusive trading opportunities or live streams. The threat is classified as elevated due to its direct financial impact, as compromised credentials can lead to immediate and irreversible asset theft from digital wallets. Infrastructure analysis reveals the domain was registered on May 5, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with high-risk domains. The site resolves to the IP address 172.67.148.32, which is proxied through Cloudflare, a common tactic to obscure hosting origins and evade takedowns. Detection metrics show that 5 out of 95 security vendors on VirusTotal flag the domain as malicious, while it appears on four independent security blocklists. Additional technical indicators include the use of Node.js, Vue.js, and Nuxt.js frameworks, suggesting a sophisticated frontend designed to replicate legitimate trading interfaces. Users who visited pump-livestream.fun should immediately cease all interaction with the site and assume any entered credentials are compromised. If wallet details or private keys were submitted, affected parties must transfer assets to a new, secure wallet and revoke access from any connected decentralized applications. Monitor transaction histories for unauthorized activity and report the incident to relevant security teams or platforms. To prevent future exposure, verify domain registration dates and IP resolutions before engaging with financial platforms, and rely on official sources for trading or streaming services.