pumppro[.]fun

PhishDestroy has identified pumppro.fun as a high-risk brand impersonation threat targeting the Pump.fun platform. This domain is currently active and employs a crypto drainer kit designed to steal cryptocurrency assets from unsuspecting users who believe they are interacting with the legitimate Pump.fun service. The page title displayed is "pump.fun," further deceiving visitors into thinking the site is authentic.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports a detection rate of 7 out of 95 security vendors flagging this domain as malicious, and it already appears on 4 security blocklists. The domain was created on April 30, 2026, registered through DYNADOT LLC, and resolves to IP address 185.112.59.172. Its SSL certificate is issued by Let's Encrypt with fingerprint E7, which adds a false sense of security. Notably, Google Safe Browsing has not yet flagged this domain, meaning users relying solely on browser protection may not be warned.

As of this advisory, pumppro.fun remains active and accessible, posing an ongoing risk to the cryptocurrency community. PhishDestroy recommends that users never visit this domain or enter any credentials or wallet information. Immediate blocking of the domain on network and email security appliances is advised. Users who have already interacted with the site should treat their accounts as compromised and take appropriate action. For verification of any suspicious domain, always use PhishDestroy's lookup tools.