restore-pump[.]fun

The domain restore-pump.fun is currently active and has been reported as a generic phishing threat as of August 03, 2026. It has been independently flagged by three prominent blocklists: PhishDestroy, MetaMask, and SEAL. These blocklist inclusions indicate that several security communities have detected or confirmed malicious activity associated with this domain. Additionally, VirusTotal results show that 2 out of 91 security vendors have classified this domain as malicious, further corroborating its risk profile.

At this time, there is no direct evidence from page titles, hosting metadata, or revealed scam kits to clarify the exact tactics or content found on the site; the specific phishing method or targeted sector remains undetermined. The available intelligence points to restore-pump.fun being actively leveraged for phishing, with multi-vendor consensus supporting this status. However, the precise nature of the phishing activity is not detailed in current threat datasets. Defenders should treat any interaction with restore-pump.fun as high risk, enforcing immediate network- and endpoint-level blocking.

Continued monitoring is advisable to capture any further developments or attribution details. As the domain remains active and its exact web content has not been externally verified, incident responders are advised to update deny lists and inform users to avoid all contact with this address. Further intelligence should be sought from participating blocklists or through direct investigation for attribution or remediation workflows.