pumpswap[.]org

pumpswap.org masquerades as a decentralized exchange, luring cryptocurrency enthusiasts into a scam. Despite being flagged by only 1 out of 95 vendors on VirusTotal, PhishDestroy identified this domain as malicious on 2025-11-02. The domain is currently offline, but was initially hosted on an IP in the US under Cloudflare's infrastructure.

The site aimed to deceive users by imitating legitimate cryptocurrency platforms, potentially leading to financial losses for unsuspecting victims. Its SSL certificate issued by Google Trust Services might have lent an air of legitimacy, further enticing users to engage with the fraudulent platform. The domain was registered with Cloudflare, Inc., a common choice for both legitimate and malicious sites due to its robust security features.

PhishDestroy's early detection capabilities highlight the importance of identifying threats in the critical window before antivirus databases update. This proactive approach is crucial in mitigating the risks posed by fresh phishing domains like pumpswap.org, which exploit the gap between domain registration and widespread detection. The domain's presence on public blocklists, including PhishDestroy's, underscores its threat to the cryptocurrency community.