# pumpswap.co — SUSPICIOUS

> PumpSwap.co, a low-risk phishing domain mimicking Solana DEX, has been taken offline. Learn about its threat indicators and containment steps.

## Summary
PhishDestroy categorizes pumpswap.co as a low-risk generic phishing domain. Although flagged, its impact appears limited due to its swift takedown.

The domain resolved to IP 213.209.129.168 and was registered via CNOBIN INFORMATION TECHNOLOGY LIMITED. It appeared on one security blocklist and was flagged by two security vendors, indicating some malicious intent. The site mimicked a Solana decentralized exchange (DEX) with the page title "PumpSwap | Solana DEX."

Users are advised to avoid interaction with this domain and similar sites. Network defenses should maintain updated blocklists, and organizations should educate users about phishing risks, especially from crypto-related scams.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Target brand: Solana
- Page title: PumpSwap | Solana DEX

## Domain Intelligence
- Registered: 2025-10-06 11:18:33
- Expires: 2026-10-06 23:59:59
- Registrar: CNOBIN INFORMATION TECHNOLOGY LIMITED
- Country: CN
- IP: 213.209.129.168
- IP Country: NL
- IP City: Hopel
- IP Org: AS208185 Net Gate Telecom S.R.L.
- Nameservers: coco.bunny.net kiki.bunny.net
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a44e5-7c65-75db-983b-02a706e7ad93.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/c9d4a347-1022-4680-b9b4-6e178666583b
- PhishDestroy: https://phishdestroy.io/domain/pumpswap.co/
- LLM endpoint: https://phishdestroy.io/domain/pumpswap.co/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpswap.co/
Last updated: 2026-03-19