pointmems[.]com

pointmems.com was observed on July 12, 2026 as an active generic phishing infrastructure. The domain was created on April 28, 2026 and is currently classified as high risk. Its operational status remains active, and it has been listed by multiple blocklists including PhishDestroy, MetaMask, and SEAL. The domain is registered through Fewmoretaps OU d/b/a Trustname.com and resolves to the IP address 188.114.97.3, which is hosted by CloudFlare, Inc. in Canada. Nameserver delegation points to ariadne.ns.cloudflare.com and ignacio.ns.cloudflare.com, confirming the use of CloudFlare’s DNS service. An SSL certificate issued by Let’s Encrypt (identifier E8) is present, and HTTP requests return a 403 status code, suggesting that the site is intentionally restricting access to legitimate browsers. Threat intelligence sources show a single AlienVault OTX pulse referencing the domain, and VirusTotal reports that 2 out of 95 scanned security vendors have flagged it. The domain appears on three independent security blocklists, and Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment. The limited detection count may indicate a low‑profile campaign or recent deployment. Defenders should incorporate pointmems.com into perimeter blocking rules and ensure that DNS resolvers are configured to block the associated IP and nameservers. Continuous monitoring of CloudFlare‑hosted IP ranges for anomalous activity is advised, as is periodic re‑evaluation of the domain’s status on threat‑intelligence platforms. Incident response teams should treat any traffic to this domain as malicious and isolate affected endpoints.