pvump[.]fun

This domain, pvump.fun, operates as a crypto drainer phishing site specifically targeting users of Curve Finance, a decentralized finance protocol. The site presents itself under the deceptive title 'Cleaner Pippin (CleanPipp) - Pump,' likely designed to lure victims into connecting their cryptocurrency wallets under false pretenses. Once connected, the site may execute unauthorized transactions, draining funds from the victim's wallet by exploiting smart contract interactions or deceiving users into signing malicious payloads. The threat is particularly insidious due to its focus on cryptocurrency users, who may suffer irreversible financial losses if they interact with the malicious infrastructure.

Analysis of pvump.fun reveals multiple technical indicators confirming its malicious nature. The domain is flagged by 5 out of 95 security vendors on VirusTotal, and it appears on at least two security blocklists, including ScamSniffer and PhishDestroy. Registered on February 21, 2026, through Spaceship, Inc., the domain resolves to the IP address 188.114.97.3. Its Gridinsoft trust score of 0/100 further corroborates its classification as high-risk infrastructure. The domain's recent creation date and immediate appearance on threat feeds suggest a deliberate effort to evade detection while maximizing short-term impact.

Users who visited pvump.fun or interacted with its content should take immediate action to mitigate potential risks. First, disconnect any cryptocurrency wallets that may have been linked to the site. Review all recent transactions for unauthorized activity, particularly those involving Curve Finance or related tokens. If funds were transferred without consent, report the incident to the relevant blockchain explorer and consider filing a complaint with local cybercrime authorities. Additionally, revoke any suspicious smart contract approvals using a wallet management tool. To prevent future exposure, ensure browser-based security extensions are active and avoid interacting with domains flagged by multiple threat intelligence sources.