xn--pnp-m1a[.]fun

This domain, xn--pnp-m1a.fun, operates as a crypto drainer scam designed to deceive users into connecting their cryptocurrency wallets to malicious smart contracts. Once connected, the site executes unauthorized transactions, draining digital assets from victims' wallets without consent. The page title 'Pump' suggests an attempt to mimic legitimate token or liquidity pool platforms, a common tactic in crypto-related fraud to exploit users seeking investment opportunities or yield farming services. Analysis indicates high-risk indicators across multiple security platforms. The domain is flagged by 12 out of 95 security vendors on VirusTotal, confirming malicious intent. Registered through Dynadot LLC on March 02, 2026, the domain appears on four security blocklists, including MetaMask and PhishDestroy, which specifically target financial fraud. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3, and technologies such as Vercel, Google Tag Manager, and Cloudflare Browser Insights were detected, which are frequently leveraged to obfuscate malicious activity and track user interactions. Users who visited xn--pnp-m1a.fun should immediately disconnect any connected wallets from the site and revoke permissions for all suspicious smart contracts. If assets were transferred, report the incident to the relevant blockchain explorer and consider filing a complaint with local cybercrime authorities. Monitor wallet activity for unauthorized transactions and enable multi-factor authentication on all financial accounts. Replace any potentially compromised credentials, including wallet seed phrases or private keys, and avoid interacting with domains flagged by security vendors or blocklists.