pumpswap[.]biz

Pumpswap.biz is a generic phishing domain that impersonates a centralized cryptocurrency exchange platform. The page title “Pumpswap Centralized Exchange” suggests the threat actor aimed to deceive users seeking legitimate exchange services. No specific brand or drainer kit was identified in available intelligence, but the domain’s structure and content indicate a credential harvesting or wallet-draining scheme.

Technical indicators confirm the domain’s malicious nature. VirusTotal reports 3 out of 95 security vendors flagging pumpswap.biz as malicious. The domain is registered through NameCheap, Inc., resolving to IP address 162.254.39.112. Created on February 21, 2026, the domain uses an SSL certificate from Google Trust Services. It appears on 3 security blocklists and is blocked by MetaMask, SEAL, and PhishDestroy. Gridinsoft assigns a trust score of 0/100. Technologies detected include PHP, Bootstrap, LiteSpeed, OWL Carousel, and jQuery. Google Safe Browsing status is not explicitly provided, but the blocklist presence implies it is flagged.

Current status indicates the domain is offline, likely due to takedown actions by hosting or registrar services. Response actions by security platforms have resulted in its inclusion on multiple blocklists, reducing immediate risk. However, residual risk remains as the threat actor may re-register similar domains or deploy new infrastructure. Users should avoid interacting with any emails or links referencing “pumpswap” and verify exchange URLs through official channels. Monitoring for lookalike domains is advised.