# xn--pnp-8na.fun — SUSPICIOUS

> The domain xn--pnp-8na.fun was used for generic phishing, now offline. Stay cautious and avoid visiting suspicious sites to protect your data.

## Summary
PhishDestroy has identified xn--pnp-8na.fun as a generic phishing domain currently under investigation. Although it is offline now, the domain was linked to deceptive schemes intended to mislead users, potentially causing unauthorized data access or financial loss. Users should remain vigilant when encountering unfamiliar domains, especially those with unusual or punycode-based names like xn--pnp-8na.fun.

This phishing activity typically involves mimicking common keywords—in this case, "pump"—to lure victims into opening malicious webpages. While VirusTotal reports no detections from 95 security vendors, the domain appears on three security blocklists, indicating that multiple threat intelligence sources consider it suspicious. The site was registered recently, on March 7, 2026, and resolved to IP address 172.67.191.196, registered via Dynadot LLC.

If you have visited xn--pnp-8na.fun, it’s important to monitor your accounts for unusual activity and change any passwords you may have entered while on the site. Running a full security scan on your devices is also recommended. To avoid future exposure, only access trusted sites and never provide personal or financial information through suspicious links. PhishDestroy encourages users to report similar domains to enhance community protection.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: pump

## Domain Intelligence
- Registered: 2026-03-07 01:07:01
- Registrar: Dynadot LLC
- Country: US
- IP: 172.67.191.196
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dina.ns.cloudflare.com guy.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 0 vendors flagged
  Vendors: []
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc5c4-c292-7246-9194-d05823da2235.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/69c778c3-aa53-43fb-9826-d3b6cfa4442b
- PhishDestroy: https://phishdestroy.io/domain/xn--pnp-8na.fun/
- LLM endpoint: https://phishdestroy.io/domain/xn--pnp-8na.fun/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/xn--pnp-8na.fun/
Last updated: 2026-03-19