pump-watchstream[.]fun

The domain pump-watchstream.fun is a high-risk threat that impersonates MetaMask, a popular cryptocurrency wallet. This impersonation can lead to credential theft, where attackers may attempt to steal sensitive information such as login credentials and private keys from unsuspecting users. Credential theft can result in financial loss and unauthorized access to users' cryptocurrency holdings.

Analysis indicates that pump-watchstream.fun is flagged by 3 out of 95 security vendors on VirusTotal, suggesting that while it is identified as a threat, it may still evade some detection mechanisms. The domain was created on May 15, 2026, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The IP address 104.21.11.161 is located in California, USA, and is hosted by Cloudflare, Inc. The site is currently active and appears on 3 known security blocklists, including PhishDestroy and SEAL, indicating ongoing efforts to mitigate its impact.

If a user has visited pump-watchstream.fun, it is critical to take immediate action to secure their accounts. First, change the passwords and private keys associated with any MetaMask wallets or accounts used while visiting the site. Enable two-factor authentication (2FA) if it is not already active, as an additional layer of security. Monitor account activity for any unauthorized transactions or suspicious behavior. Finally, report the incident to the MetaMask support team and any relevant security services to ensure that the threat is tracked and addressed.