popmma[.]lol

Analysis of popmma.lol on August 06, 2026 shows a newly registered domain (creation date August 03, 2026) that resolves to the IP address 188.114.97.10. The domain is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers kyree.ns.cloudflare.com and pam.ns.cloudflare.com. Registration was performed through Global Domain Group LLC, a registrar that does not appear on any high‑risk list.

The domain is presently listed on a single security blocklist and is actively blocked by PhishDestroy, suggesting that at least one threat‑intelligence feed has identified it as a phishing vector. VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation engines, none of which raised a detection at the time of scanning; however, the absence of detections does not constitute evidence of safety, especially given the recent registration date. No additional public signals such as Safe Browsing verdicts, OTX mentions, SSL certificate details, HTTP response codes, trust‑score metrics, or page‑title information are available in the current intelligence set.

Consequently, the observable evidence points to a domain that is likely being used for generic phishing, but the lack of broader detection coverage leaves the full scope of malicious activity uncertain. Defenders should continue to block popmma.lol at network perimeters, monitor outbound connections to its IP address, and add the domain to internal deny lists. Ongoing telemetry collection, including URL reputation checks and endpoint detection, is recommended to capture any emerging payloads or credential‑harvesting pages that may be deployed behind the domain.