pump-swap[.]co
“PumpSwap | Solana DEX”
pump-swap.co — Conteúdo indisponível. Representação da marca: Solana; Tipo de golpe: Brand Impersonation. Resumo das evidências: VirusTotal 14/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 92/100. Registrador: DYNADOT.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain pump-swap.co has been identified as a high‑risk brand impersonation site targeting Solana users. The site presents a page titled "PumpSwap | Solana DEX" and mimics legitimate Solana decentralized exchange branding to lure victims. The domain was registered on May 16, 2026 through DYNADOT LLC and is currently active, with an HTTP 200 response indicating a live service.
Infrastructure analysis shows the domain resolves to IP address 130.12.180.128, which is geolocated to the Netherlands and associated with Virtualine Technologies. The host runs Nginx with OpenResty, and the TLS certificate is issued by Let’s Encrypt (identifier E8). Nameservers ns1.dyna-ns.net and ns2.dyna-ns.net are in use, a common configuration for rapidly provisioned malicious sites. The site’s trust score from Gridinsoft is 0 out of 100, reflecting a lack of reputable reputation.
Detection data indicates the domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis shows that 1 out of 95 security vendors flagged the domain, reinforcing the suspicion of malicious intent despite limited vendor consensus. The page title and content are crafted to resemble an official Solana DEX, a classic impersonation technique aimed at credential harvesting or transaction redirection.
Defenders should immediately add pump-swap.co to network and endpoint blocklists, enforce DNS filtering, and monitor for any outbound connections to the associated IP address. Security teams should alert users about the fraudulent Solana branding and advise verification of URLs before interacting with DEX services. Continuous monitoring of the domain’s infrastructure and any related subdomains is recommended, as the operators may pivot to additional malicious assets.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 2 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% de confiançaOpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.
openresty.org 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of pump-swap.co · checked May 16, 2026
Evidências e relatórios externos
PD-20260516-82480C Recipient: abuse@virtualine.org Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo