pmcpump[.]fun

The domain pmcpump.fun has been identified as a brand impersonation threat specifically targeting the legitimate Pump.fun platform. Currently marked as offline, this domain was created on February 21, 2026, and had adopted a page title of "PUMP.FUN PMC - SUPREME MILITARY OVERLORDS" to appear as an official or affiliated service. The site is categorized as a crypto drainer, designed to deceive users into connecting their wallets or providing sensitive information under the guise of a Pump.fun-related project.

Technical analysis reveals that pmcpump.fun resolves to the IP address 162.0.209.170 and was registered through NameCheap, Inc. Its SSL certificate was issued by Sectigo Limited using the Sectigo RSA Domain Validation Secure Server CA. Notably, VirusTotal scans show 0 out of 95 vendors flagged the domain, meaning it had not been widely detected by security tools at the time of analysis, though it appears on one security blocklist. This low detection rate underscores the importance of proactive threat hunting.

Given that the domain has been taken offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who interacted with pmcpump.fun by entering credentials or connecting a cryptocurrency wallet should immediately change passwords, revoke wallet permissions, and monitor accounts for unauthorized activity. Additionally, organizations impersonated by such domains should consider issuing alerts to their user base and pursuing domain takedown procedures to prevent future incidents.