pumdp[.]fun

PhishDestroy has identified pumdp.fun as a live malicious domain hosting a crypto drainer, presenting an elevated risk to users who engage with it. The domain was registered on March 04, 2026, through NameSilo, LLC and resolves to a server at IP address 172.67.179.113. While only 1 out of 95 VirusTotal-supported security engines has flagged the domain, the presence of a Let’s Encrypt SSL certificate suggests an attempt to appear legitimate. The short domain age and low detection rate indicate a recently deployed threat with the potential for rapid growth and increased malicious activity in the near term, especially as the campaign scales against unsuspecting cryptocurrency users.

Technical analysis confirms the domain is associated with a crypto drainer aimed at illicitly transferring funds from digital wallets during transaction approvals. The lack of widespread detection (1/95) underscores the challenge security vendors face in identifying emerging, low-signal threats that may only begin to trigger alerts after multiple reports have been submitted. NameSilo’s role as the registrar raises concerns about due diligence, as bulk registrations with minimal identity verification can facilitate the rapid proliferation of such malicious domains. The combination of recent registration, low blocklist coverage, and hosting on a cloud IP further highlights the domain’s transient nature and potential to evade detection through IP rotation or rapid takedown evasion.

Users who have visited pumdp.fun or interacted with its content should immediately assess their cryptocurrency wallets for unauthorized transactions. If any funds have been drained, users should report the incident to local law enforcement and file a complaint with their financial institution. To prevent future exposure, users are strongly advised to verify any domain before engaging in transactions—especially those involving digital assets—by consulting reputable threat intelligence platforms like PhishDestroy, where this domain is actively monitored. Additionally, enable multi-factor authentication on all wallet and exchange accounts and consider using hardware wallets with transaction approval on trusted devices.