pumph[.]fun

PhishDestroy identifies pumph.fun as a cryptocurrency pump-and-dump phishing site designed to trick users into connecting their wallets to a fake token launch. When victims visit the page titled 'pump,' the site prompts them to link MetaMask or other wallets to claim fraudulent 'PUMP' tokens. Behind the site is IP 188.114.97.3, hosted on infrastructure that has already been blocked by MetaMask and SEAL security filters. The domain resolves via a Google Trust Services SSL certificate, giving it a veneer of legitimacy, but the same certificate is used across multiple known phishing campaigns. This domain was flagged by security vendors after it appeared on two blocklists and was detected by only 1 out of 95 VirusTotal engines as of the latest scan. It was registered on March 14, 2026 through DYNADOT LLC, a registrar often used in bulk domain registrations tied to low-effort scams. The short domain age and high-risk hosting profile suggest this is part of a fast-moving pump-and-dump operation targeting crypto enthusiasts. If you visited pumph.fun, disconnect your wallet immediately and revoke any token approvals through tools like revoke.cash. Do not enter any private keys or seed phrases. Report the domain to your antivirus provider and consider changing passwords if you reused credentials. Always verify token contracts on Etherscan or similar platforms before engaging, and never approve wallet connections on unfamiliar sites.