pump-elon[.]fun

The domain pump-elon.fun was set up to trick users into thinking they were visiting the legitimate Pump.fun platform, which is a popular tool for creating and trading meme coins on Solana. Instead of offering any real service, this malicious site was designed to drain cryptocurrency wallets—a type of threat often called a crypto drainer. When users connected their wallets or entered private keys, the site would steal funds directly. It's a classic impersonation scam that preys on the hype around meme coins and airdrops.

PhishDestroy identified this threat through multiple intelligence sources. The domain was created on March 28, 2026, and registered using Registrar of Domain Names REG.RU LLC. It resolved to the IP address 188.114.96.3 and had an SSL certificate issued by Let's Encrypt (E7), which gave it a false sense of security. VirusTotal scans showed 0 out of 95 security vendors flagged it, meaning it slipped past many detection systems at the time of analysis. However, AlienVault OTX had it in 1 threat intelligence pulse, and it appeared on 1 security blocklist, providing early warning. Fortunately, the site has since been taken offline, reducing immediate risk.

If you visited pump-elon.fun and connected your crypto wallet, you should immediately revoke any permissions granted to that site using a token approval revoker tool. Transfer any remaining funds to a new wallet that has never interacted with the domain. Even if you didn't connect a wallet, clear your browser cache and avoid reusing any passwords entered on the page. Always verify the authenticity of crypto platforms by double-checking URLs and using resources like PhishDestroy before connecting your wallet. Stay safe and stay skeptical of too-good-to-be-true offers.