puinp-fun[.]top

This domain, puinp-fun.top, is identified as a high-risk phishing infrastructure designed to impersonate Ethereum through a fraudulent token airdrop scheme. Analysis indicates the domain specifically targets users of the Ethereum blockchain, likely deploying a cryptocurrency drainer kit to steal wallet credentials or private keys under the guise of a legitimate airdrop event. The page title, 'Ethereum Token Airdrop,' reinforces the deception by mimicking official Ethereum distribution campaigns, a common tactic in cryptocurrency phishing operations. Infrastructure analysis reveals the following technical indicators: the domain was registered on March 24, 2026, through PDR Ltd. and resolves to the IP address 104.21.28.46, hosted behind Cloudflare, Inc. in Canada. Google Safe Browsing has flagged the domain as phishing, and it appears on three security blocklists. VirusTotal reports 18 out of 95 security vendors detecting malicious activity associated with puinp-fun.top. Notably, the domain lacks an SSL certificate, a red flag for users expecting encrypted connections on financial or cryptocurrency-related sites. As of the latest assessment, puinp-fun.top has been taken offline, reducing immediate exposure to potential victims. Response actions include blocking by multiple security entities, including PhishDestroy, MetaMask, and SEAL. Despite its current offline status, the domain remains a documented threat due to its recent activity and the persistence of similar phishing infrastructure. Users are advised to verify airdrop legitimacy through official Ethereum channels, avoid interacting with unsolicited token distribution links, and monitor wallet activity for unauthorized transactions. The absence of SSL encryption and the domain's registration through a low-reputation registrar further underscore the need for heightened vigilance.