pump-swap[.]cc

The domain pump-swap.cc has been identified as a threat due to its brand impersonation activities targeting the 'across' platform. This domain masquerades as a legitimate Solana decentralized exchange (DEX) and token launch platform, potentially luring users into phishing traps. The impersonation can lead to unauthorized access to user's cryptocurrency wallets or other sensitive information, posing a significant risk to anyone interacting with this fraudulent site.

Technical analysis of pump-swap.cc reveals several concerning indicators. The domain was created on October 14, 2025, and is registered through CNOBIN INFORMATION TECHNOLOGY LIMITED. Despite its relatively recent creation, the domain has already been flagged by 4 out of 95 security vendors on VirusTotal, highlighting its malicious nature. Additionally, the domain resolves to the IP address 78.159.156.221 and has been blocked by major security entities, including MetaMask, SEAL, and PhishDestroy. The domain appears on three separate security blocklists and is listed in a threat intelligence pulse on AlienVault OTX, indicating widespread recognition of its threat potential.

Users who have visited pump-swap.cc are advised to take immediate action to protect their digital assets and personal information. This includes changing passwords associated with their online accounts and monitoring for any unauthorized transactions or activity. It is also recommended to update security software and run comprehensive scans to detect any potential malware infections. Reporting the incident to relevant cybersecurity authorities can also aid in further mitigating the threat posed by this domain. Continued vigilance and security awareness are essential in preventing further exploitation by similar phishing threats.