ecosystem-pump[.]fun

Ecosystem-pump.fun is a malicious domain engaged in brand impersonation, specifically targeting Pump.fun, a legitimate cryptocurrency platform. This domain was designed to deceive users by presenting a fake partnership program titled "Pump fun x Padre | Official Partnership Program," likely to steal credentials or cryptocurrency assets. The threat type is classified as a crypto drainer, aiming to trick victims into connecting their wallets or providing sensitive information.

Technical indicators reveal that the domain was registered through Dynadot Inc on April 27, 2026, and resolves to the IP address 94.103.1.174. It holds an SSL certificate from Let's Encrypt (E8). VirusTotal analysis shows 2 out of 95 security vendors flagging this domain as malicious, while it appears on 4 security blocklists. Google Safe Browsing status, though not explicitly provided, is typically monitored; however, the blocklist presence confirms the threat. The domain's creation date is unusually far in the future, suggesting potential manipulation or a placeholder date.

Currently, ecosystem-pump.fun is offline, indicating it has been taken down or suspended. The response actions likely involve coordination with the registrar and hosting provider to mitigate the threat. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends verifying any site claiming to be Pump.fun through official channels. Do not connect wallets or enter credentials on unverified platforms. For real-time checks, use PhishDestroy's lookup tools. Remaining risk includes potential re-registration or copycat domains. Always double-check URLs and report suspicious sites to security teams.