en-phuntum[.]pages[.]dev

The domain en-phuntum.pages.dev is a generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, en-phuntum.pages.dev has been taken offline, but it previously posed an elevated risk to visitors by attempting to harvest login information through deceptive means.

Technical indicators confirm the malicious nature of en-phuntum.pages.dev. The domain was flagged by 11 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai, while appearing on one security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on October 21, 2025, the domain resolved to the IP address 188.114.97.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who may have interacted with en-phuntum.pages.dev should immediately change passwords for any accounts accessed during the exposure period, particularly if credentials were entered. Enabling two-factor authentication (2FA) on all sensitive accounts is strongly recommended to mitigate further risk. Victims should also monitor accounts for unauthorized activity and report the phishing domain to their email provider, browser security teams, or platforms like Google Safe Browsing or PhishTank to aid in broader protection efforts.