pussent[.]fundyalbert[.]com

PhishDestroy identifies the domain www.pussent.fundyalbert.com as a generic phishing host leveraging a crypto drainer kit, currently impersonating an unspecific brand target. The landing page is designed to harvest cryptocurrency wallet credentials or directly siphon funds via malicious JavaScript payloads injected into fake transaction interfaces. The infrastructure remains under active development with no immediate ties to known malware families, suggesting a fast-evolving campaign.

This domain was registered through TUCOWS.COM, CO. on May 16, 2022, and resolves to IP 185.149.120.183. The SSL certificate is issued by Let's Encrypt, and VirusTotal currently shows 9/95 detection coverage—indicating negligible AV/EDR adoption. While not flagged by Google Safe Browsing (GSB), this domain appears on 2 known threat intelligence blocklists, underscoring its recent emergence and low historical reputation.

The threat remains active and under investigation, with no confirmed takedown actions as of this report. Users are advised to block 185.149.120.183 at the network perimeter and audit any recent crypto wallet interactions involving this domain. Remaining risk is elevated due to undetected payloads and fresh infrastructure, though campaign maturity is still in early stages. Immediate verification via PhishDestroy is recommended for any suspicious links or domains.