pumpfunwallet[.]netlify[.]app

Analysis of pumpfunwallet.netlify.app indicates active malicious activity targeting cryptocurrency users. The domain is hosted on Netlify, a static‑site service, and was flagged by PhishDestroy as a crypto drainer. It currently appears on one public security blocklist, confirming that at least one external sinkhole has taken action against it.

VirusTotal scans show 12 of 91 security vendors flagging the domain, demonstrating a moderate consensus of malicious behavior across multiple detection engines. The presence of these detections, combined with the blocklist entry, suggests the site is being used to lure victims into authorizing unauthorized cryptocurrency transfers, a typical pattern for crypto‑drainer campaigns. No additional public intelligence such as Safe Browsing alerts, OTX references, or SSL certificate details is available at this time, leaving the full scope of the infrastructure unclear.

Defenders should immediately block pumpfunwallet.netlify.app at perimeter firewalls and DNS resolvers, add the domain to internal blocklists, and monitor outbound transaction attempts for anomalous authorizations linked to the domain. Continuous re‑scanning with VirusTotal and other sandbox services is recommended to capture any evolution of the payload or hosting changes.