pumpfun-prize[.]info

This domain is flagged as an elevated-risk brand impersonation threat specifically designed to deceive users through a fraudulent airdrop scam. The site mimics Discord, a widely used communication platform, to exploit trust and distribute malicious payloads or harvest credentials under the guise of a promotional giveaway. Analysis indicates pumpfun-prize.info was registered on December 26, 2025, through NiceNIC International Group Co., Limited. It resolves to the IP address 104.21.83.183 and is currently offline. The domain appears on four security blocklists and is detected by 3 out of 95 security vendors on VirusTotal. Additional threat intelligence confirms its presence in one AlienVault OTX pulse, while multiple transaction monitoring systems have blocked interactions with this domain. To mitigate risks associated with this threat, network defenders should update blocklists to include the domain and its resolving IP address. End users should be alerted to verify the legitimacy of any airdrop or promotional offers by cross-referencing official communication channels. Security teams are advised to monitor for related domains registered under the same registrar or resolving to the same IP, as threat actors frequently reuse infrastructure. If credentials were entered on this site, affected accounts should be secured immediately through password resets and multi-factor authentication enforcement.