pumpee[.]fun

Pumpee.fun emerges as a phishing threat targeting MetaMask users, leveraging a cloaking mechanism to evade detection. With a cloaking score of 2/10, this domain serves benign content to scanners while potentially malicious content to unsuspecting users. Detected by PhishDestroy on June 22, 2026, it quickly made its way onto public blocklists, including those maintained by MetaMask and SEAL.

Despite being flagged by only 1 out of 91 vendors on VirusTotal, pumpee.fun's inclusion on multiple blocklists underscores its threat potential. The domain is registered through PDR Ltd. and hosted on an IP managed by Cloudflare, Inc. in the United States. Its SSL certificate is issued by Google Trust Services, adding a deceptive layer of legitimacy to its operations.

The platform risk score for pumpee.fun is a perfect 100/100, indicating a high likelihood of malicious activity. This score, combined with its cloaking tactics and rapid detection, highlights the domain's role in a sophisticated phishing campaign. The use of cloaking allows it to bypass traditional security measures, exploiting the gap between domain registration and antivirus database updates.

PhishDestroy's early detection of pumpee.fun exemplifies the importance of proactive threat intelligence. By identifying threats during the critical pre-detection window, PhishDestroy helps mitigate risks before they can cause significant harm. The swift addition of pumpee.fun to key blocklists further aids in protecting users from this evolving phishing threat.