pump-tool[.]fun

PhishDestroy identifies pump-tool.fun as an active phishing domain involved in a generic crypto drainer threat. The site uses deceptive tactics to lure users into revealing sensitive crypto wallet information, potentially draining digital assets. Although no specific brand impersonation or known drainer kit is explicitly connected, the nature of the threat aligns with common crypto wallet compromise attacks.

Technical indicators for pump-tool.fun include a VirusTotal detection ratio of 4 out of 95 security vendors flagging the domain, signaling a moderate but credible threat. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 17, 2026, and resolves to the IP address 188.114.96.3. It holds a Let's Encrypt SSL certificate to appear legitimate. The domain appears on two security blocklists and is actively blocked by well-known security tools such as MetaMask and SEAL, confirming its malicious reputation. Google Safe Browsing status is negative (blocked), reinforcing the elevated risk.

Currently, pump-tool.fun remains active and continues to pose an elevated risk to users, particularly those operating cryptocurrency wallets. PhishDestroy recommends avoiding any interaction with this domain and urges users to conduct thorough verification on trusted security platforms before engaging with similar URLs. Security tools blocking this domain provide a critical defense layer, but due to ongoing activity, vigilance and proactive safety measures are essential to prevent crypto asset loss or credential theft.