pumpfun-boards[.]pages[.]dev

This domain, pumpfun-boards.pages.dev, is identified as a high-risk brand impersonation site targeting users of the Pump.fun token launch platform. Analysis indicates the site mimics the legitimate Pump.fun interface to deceive visitors into entering wallet credentials or approving malicious smart contracts, likely facilitating unauthorized token transfers or fund drainage. The page title 'Pump' and domain structure closely resemble the authentic service, increasing the likelihood of successful social engineering attacks against cryptocurrency users. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered through Cloudflare on March 25, 2026, with an SSL certificate issued by Google Trust Services. It resolves to the IP address 188.114.97.3 and is flagged by 12 out of 95 security vendors on VirusTotal. The domain appears on five distinct security blocklists and is actively blocked by wallet security tools, including MetaMask and ScamSniffer. Detected technologies include jsDelivr, HSTS, crypto-js, and Cloudflare’s HTTP/3 protocol, which may be leveraged to obfuscate malicious payloads or exfiltrate stolen data. Users who visited pumpfun-boards.pages.dev should immediately revoke any smart contract approvals associated with the site using a wallet security tool. All connected wallets should be audited for unauthorized transactions, particularly those involving token swaps or transfers to unknown addresses. If credentials were entered, users must assume compromise and migrate funds to a new wallet address. Browser data, including cookies and cached files, should be cleared to eliminate residual tracking mechanisms. Given the domain’s high-risk classification and offline status, continued vigilance is advised, as threat actors may redeploy similar infrastructure under new domains.