pump-vote[.]fun

pump-vote.fun is a sophisticated phishing domain masquerading as a legitimate voting platform for cryptocurrency projects, specifically targeting users of the Pump.fun ecosystem. The site presents itself as a voting interface, likely enticing victims to connect their crypto wallets to participate in polls or token selections. Once connected, the site deploys a crypto drainer that siphons funds from the victim’s wallet, a common tactic in the decentralized finance space. The threat is amplified by the domain’s professional appearance and the growing popularity of voting mechanisms in crypto communities.

Evidence from security analysis confirms the malicious nature of pump-vote.fun. VirusTotal data shows that 5 out of 95 security vendors flag this domain as malicious, indicating a consensus among leading threat detection engines. The domain was created on March 31, 2026, through NAMECHEAP INC, a registrar frequently abused by cybercriminals due to its low cost and lax verification. It currently appears on 3 security blocklists, and its SSL certificate is issued by Let's Encrypt (YE1), which, while legitimate in itself, is often used by phishing sites for a false sense of security. The domain resolves to IP address 188.114.97.3, which is associated with Cloudflare, adding another layer of obfuscation. Despite being flagged, the site remains active, posing an ongoing risk to unsuspecting users.

Any user who has visited pump-vote.fun and connected their cryptocurrency wallet should immediately revoke all token approvals and permissions granted to the site. This can be done through wallet interfaces like MetaMask or by using blockchain explorers such as Etherscan to revoke specific approvals. Additionally, users should transfer remaining funds to a new, secure wallet address to prevent further loss. It is crucial to never connect a wallet to unknown or unverified sites. For ongoing protection, PhishDestroy recommends using browser extensions that block known phishing domains and regularly checking the PhishDestroy database for updates on this and other threats. Staying informed and cautious is the best defense against such crypto-focused phishing campaigns.