bullhype[.]fun

This domain was registered on July 16 2026 through NameSilo, LLC and uses Cloudflare nameservers (carlos.ns.cloudflare.com, walk.ns.cloudflare.com). DNS resolution points to the IPv4 address 172.67.222.1, which is part of Cloudflare’s global edge network. The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one security vendor has observed malicious use.

VirusTotal records show that the domain has been scanned by 95 vendors; none have raised a detection at the time of analysis, but the absence of alerts does not imply benign intent. No public SSL certificate details, HTTP status codes, or page title information are currently available, limiting the ability to confirm the content served. The limited intelligence suggests a newly created phishing infrastructure, yet the lack of broader detection coverage leaves the threat landscape uncertain.

Defenders should proactively deny connections to bullhype.fun at the network perimeter, add the domain to internal blocklists, and monitor DNS queries for the associated Cloudflare IP range. Continuous re‑assessment is advised, and any observed traffic should be correlated with endpoint telemetry to identify potential credential harvesting attempts. As the domain remains active, ongoing vigilance is required.