distribution-pump[.]fun

distribution-pump.fun is currently listed as an active generic phishing vector with an elevated risk rating. The domain was registered on July 17, 2025 through Porkbun LLC and has been observed in a single security blocklist. DNS resolution points exclusively to the IPv4 address 207.207.210.107, which serves as the sole hosting endpoint for the malicious payload. Scanning on VirusTotal shows that one of ninety‑one participating security vendors flagged the domain, indicating the presence of at least one detection signature.

The blocklist entry is corroborated by PhishDestroy, which has actively blocked traffic to the domain. No additional public intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or trust‑score metrics are available at this time. Analysis of the limited data suggests that the infrastructure is intentionally minimal, relying on a single IP and a recent registration to reduce attribution surface. The use of a reputable registrar, Porkbun LLC, does not mitigate the threat, as the registrar’s services are frequently abused by threat actors.

Defenders should add the domain to local deny lists, enforce outbound filtering for the resolved IP, and monitor for any future appearance in broader blocklists or detection feeds. Continuous re‑query of VirusTotal and similar aggregators is recommended to capture any changes in detection consensus. Network telemetry that shows connections to 207.207.210.107 should be treated as suspicious and investigated according to organizational incident‑response procedures.