pumzp[.]fun

The domain pumzp.fun is a cryptocurrency phishing site that impersonates well-known brands such as Curve, Phantom, and Revolut. Despite being taken offline, it was flagged by 3 out of 93 VirusTotal vendors as malicious. The domain's fraudulent intent is underscored by its presence on public blocklists including PhishDestroy and ScamSniffer.

Pumzp.fun is registered with PDR Ltd. and hosted on an IP operated by Cloudflare, Inc. in the United States. The site lacks an SSL certificate, which is a common trait among phishing sites aiming to appear legitimate without incurring additional costs. The domain was created on February 21, 2026, but PhishDestroy detected it earlier on February 8, 2026, indicating a proactive approach in identifying threats before they become widespread.

The site primarily targets users interested in cryptocurrency, leveraging the popularity of brands like Solana and Scroll to lure victims. The platform risk score of 15/100 suggests a moderate level of threat, yet its offline status reduces immediate risk. However, the impersonation of multiple brands highlights the potential for significant damage had it remained active. This case exemplifies the rapid detection capabilities of PhishDestroy, capturing threats in their nascent stages and contributing to public blocklists to mitigate harm.