pump[.]fun-app-wailet-api-v2-connect[.]com

The domain pump.fun-app-wailet-api-v2-connect.com is a brand impersonation site specifically targeting users of Pump.fun, a legitimate cryptocurrency platform. This domain is designed to deceive visitors into believing they are interacting with the real Pump.fun service, but in reality it functions as a crypto drainer, likely attempting to steal wallet credentials or private keys. As of the latest check, the domain is offline, indicating it has been taken down, but users should remain vigilant as similar threats may reappear.

Technical analysis reveals that this domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating a low but notable detection rate. It was created on February 21, 2026, and appears on one security blocklist. The page title is identical to the domain name, pump.fun-app-wailet-api-v2-connect.com, which lacks the official branding of Pump.fun. The domain's registration details and IP address are not provided, but the creation date and blocklist presence suggest it was a recently established malicious site. The overall risk level is elevated due to the brand impersonation and the potential for financial loss.

Given that this domain is now offline, the immediate threat is mitigated. However, users who may have visited the site or entered credentials should take immediate action: change passwords for any related accounts, enable two-factor authentication, and monitor for unauthorized transactions. PhishDestroy recommends always verifying URLs directly with the official Pump.fun website and avoiding links from untrusted sources. For any concerns, users can check the domain against PhishDestroy's database or report similar suspicious domains to help protect the community.