pumps[.]mom

This domain is classified as a high-risk crypto drainer, a specialized form of phishing designed to siphon cryptocurrency from connected wallets. Analysis indicates the site employs deceptive prompts to trick users into authorizing malicious transactions, leading to immediate and irreversible asset theft. The threat specifically targets wallet extensions and mobile applications, exploiting signature requests to execute unauthorized transfers without user awareness. Infrastructure analysis reveals multiple technical indicators corroborating malicious intent. The domain pumps.mom resolves to IP address 104.21.22.112 and was registered on June 03, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. Detection metrics show 17 out of 95 security vendors on VirusTotal flag the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on five distinct security blocklists and is actively blocked by wallet security tools including MetaMask, PhishDestroy, SEAL, ScamSniffer, and Maltrail. The page title 'Pump' suggests an attempt to mimic legitimate token promotion or liquidity pool interfaces. Mitigation against crypto drainer threats requires strict transaction scrutiny and infrastructure verification. Users should immediately revoke any suspicious wallet authorizations and verify domain authenticity before interacting with blockchain interfaces. Wallet security extensions should be configured to block unrecognized domains automatically, and all transaction requests should be cross-checked against known legitimate platforms. Given the irreversible nature of cryptocurrency transactions, proactive domain validation and signature verification are critical to preventing asset compromise. The domain's current offline status does not eliminate risk, as similar infrastructure may re-emerge under different names.