pumpesoswapa[.]fun

This domain is flagged for elevated risk due to brand impersonation targeting Solana, specifically mimicking a decentralized exchange (DEX) platform. The threat type involves fraudulent financial services under the guise of legitimate cryptocurrency infrastructure, designed to deceive users into disclosing credentials or transferring assets. Analysis indicates pumpesoswapa.fun was registered on February 28, 2026, through GoDaddy.com, LLC. It resolves to the IP address 186.2.175.35 and employs DDoS-Guard for hosting protection, alongside a Let's Encrypt SSL certificate. The domain appears on 3 security blocklists and has been included in 2 AlienVault OTX threat intelligence pulses. Detection metrics show 5 out of 95 security vendors on VirusTotal flagging the domain, while Gridinsoft assigns it a trust score of 0/100. Access to the domain is currently blocked by multiple security layers, including MetaMask and PhishDestroy. Mitigation requires immediate action from security teams and end-users. Network-level blocking of the IP 186.2.175.35 and domain pumpesoswapa.fun is recommended to prevent access. Cryptocurrency wallet providers should integrate the domain into their fraud detection rulesets to block transaction requests originating from it. Users should verify DEX platforms through official Solana channels before interacting with any swap services. Monitoring for similar domains using the seed 'pump' or 'swap' in combination with Solana branding is advised to preempt further impersonation attempts.