pumpfun-app[.]org

This domain poses a threat as it impersonates Pump.fun, aiming to deceive users into divulging sensitive information or installing malicious software. PhishDestroy identifies pumpfun-app.org as a potential crypto drainer, created on May 16, 2026, and registered through Dynadot Inc, which was later taken offline.

The indicators of this threat are clear, with 1 out of 95 security vendors on VirusTotal flagging it, and its appearance on 3 security blocklists, as well as being found in 1 threat intelligence pulse on AlienVault OTX, all pointing to its malicious intent.

If a user visited pumpfun-app.org, they should immediately verify the legitimacy of the site on PhishDestroy and take necessary precautions to secure their accounts, such as changing passwords and monitoring for any suspicious activity, to prevent potential damage from this elevated risk.