pumpteam[.]fun

This domain is flagged as a generic phishing site. The registration record shows creation on 24 July 2026, registered through DYNADOT LLC, and using the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net. DNS resolution points to the IPv4 address 94.103.1.156. The domain currently appears on a single security blocklist and is actively blocked by the PhishDestroy feed, confirming that at least one trusted sinkhole is already filtering traffic.

VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the scanners raised a detection at the time of analysis. While the lack of a vendor flag does not constitute evidence of benign intent, it indicates that the payload or landing page may be either novel or deliberately evasive. No additional public intelligence such as Google Safe Browsing, OTX, SSL certificate details, HTTP response codes, or trust‑score metrics is available, leaving the content of the site unverified. Consequently, the primary confidence in the malicious classification derives from the blocklist entry and the PhishDestroy indicator.

Defenders should add pumpteam.fun to outbound DNS and proxy block rules, enforce network‑level filtering of the associated IP address, and monitor any future detections from additional reputation services. Continuous re‑scanning of the domain with sandbox or URL‑analysis tools is recommended to capture potential changes in payload or hosting. Until further evidence emerges, the domain should be treated as high‑risk for credential‑stealing activity.