pumpswap[.]live

The domain pumpswap.live is a confirmed phishing site engaged in brand impersonation, specifically targeting Revolut users under the guise of a cryptocurrency platform labeled 'PumpSwap DEX'. This scam operates as a cryptocurrency fraud, attempting to deceive victims into interacting with malicious smart contracts or disclosing sensitive financial information. As of the latest verification, pumpswap.live has been taken offline, though its prior activity remains a documented threat.

Technical analysis of pumpswap.live reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Seclookup and SOCRadar, and appears on 1 security blocklist (PhishDestroy). Registered through Web Commerce Communications Limited on April 05, 2025, the site resolved to the IP address 104.21.12.182, hosted by Cloudflare, Inc. (AS13335) in the US. No SSL certificate was observed, and the domain was referenced in 1 AlienVault OTX threat intelligence pulse. The page title displayed as 'PumpSwap DEX', reinforcing its fraudulent cryptocurrency theme.

Individuals who interacted with pumpswap.live should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction histories for unauthorized activity. Victims of credential phishing should change passwords for associated accounts, enable two-factor authentication, and review financial statements for signs of fraud. Report the domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand’s security team to aid in broader mitigation efforts.