pumpswap-fun[.]com

This domain, pumpswap-fun.com, is actively impersonating a Solana-based cryptocurrency exchange as of July 12, 2026. Analysis indicates the site presents itself as 'PumpSwap | Solana Exchange' according to its page title, directly targeting users of the Solana blockchain. The domain was registered on April 15, 2026, through Dynadot Inc and currently resolves to the IP address 130.12.180.128, hosted by Virtualine Technologies in the Netherlands. Infrastructure analysis reveals nameservers ns1.dyna-ns.net and ns2.dyna-ns.net, consistent with the registrar's default DNS configuration. Security vendors have flagged this domain with a Gridinsoft trust score of 0 out of 100, and it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL. Four out of ninety-five engines on VirusTotal detect the domain as malicious, while AlienVault OTX has recorded it in one threat intelligence pulse. The site maintains an active SSL certificate issued by Let's Encrypt, which does not indicate legitimacy but rather reflects standard phishing infrastructure practices to evade browser warnings. The HTTP status code 200 confirms the site is currently accessible and operational. The exact mechanics of the scam remain unconfirmed due to the absence of on-page analysis, though the classification as a 'fake exchange' suggests it likely solicits cryptocurrency deposits under false pretenses. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Organizations monitoring Solana-related threats may correlate this domain with other known fake exchange campaigns, particularly those leveraging similar naming conventions or infrastructure patterns. Given its recent registration and active status, continued monitoring for changes in hosting or additional detection by security vendors is recommended.