pumpswap[.]co

The domain pumpswap.co is a phishing site engaged in brand impersonation targeting the Solana cryptocurrency ecosystem. It presents itself as a decentralized exchange (DEX) under the name 'PumpSwap | Solana DEX' but operates as a scam designed to deceive users into interacting with fraudulent cryptocurrency services. As of the latest verification, pumpswap.co has been taken offline, though its prior activity posed an elevated risk to users.

Technical indicators confirm the malicious nature of pumpswap.co. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Seclookup and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through CNOBIN INFORMATION TECHNOLOGY LIMITED on October 06, 2025, it resolved to the IP address 213.209.129.168, hosted in the Netherlands under AS208185 (Net Gate Telecom S.R.L.). The site lacked an SSL certificate, and its nameservers were coco.bunny.net and kiki.bunny.net. Gridinsoft assigned it a trust score of 0/100, reinforcing its classification as a phishing domain.

Users who interacted with pumpswap.co should immediately revoke any token approvals granted to the site and transfer funds to a new wallet to prevent unauthorized access. If credentials were entered, change passwords for associated accounts and enable two-factor authentication (2FA). Report the domain to relevant platforms, such as Google Safe Browsing, PhishTank, or the impersonated brand (Solana), to aid in broader mitigation efforts.