vote[.]dev-pump[.]fun

PhishDestroy has placed vote.dev-pump.fun under active investigation for brand impersonation targeting the Pump.fun ecosystem. The domain mimics the legitimate Pump.fun platform to trick users into connecting cryptocurrency wallets and signing malicious transactions that drain assets. No detections on VirusTotal currently (9/95 engines) suggest this threat is still in early deployment, leaving users exposed until broader detection coverage is achieved. This domain was flagged on March 14, 2026, and resolves to IP 104.21.70.58 through Registrar of Domain Names REG.RU LLC. The Let’s Encrypt SSL certificate adds a veneer of authenticity, but the domain’s recent creation and zero VirusTotal detections indicate a low-signature attack vector. REG.RU’s inclusion in multiple abuse blocklists heightens the risk that this domain could be reused in future campaigns against Pump.fun or related services. Users should immediately verify any vote.dev-pump.fun links by consulting PhishDestroy’s blocklist before engagement. Avoid connecting wallets or inputting credentials on this domain. If exposure occurs, revoke wallet permissions via reputable blockchain explorers and report the incident to Pump.fun’s support and PhishDestroy’s threat intake channel. Monitor wallet transactions for unauthorized transfers and rotate private keys if compromise is suspected.