4-25webullish[.]lat

The domain 4-25webullish.lat is currently active and is associated with generic phishing activity, specifically a fake exchange scam. There is no evidence that this site impersonates a specific brand or uses a known drainer kit. Users searching for information about whether 4-25webullish.lat is safe or a scam should be aware that it has been flagged for phishing and presents an elevated risk.

Technical analysis shows that 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and SOCRadar, have detected malicious activity associated with 4-25webullish.lat. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 22, 2026. It resolves to the IP address 172.67.141.105, hosted in CA by Cloudflare, Inc. The site uses a Let's Encrypt SSL certificate and is protected by Cloudflare technologies, including Browser Insights and HTTP/3. The domain appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The observed page title is 'Just a moment...'.

Anyone who interacted with 4-25webullish.lat, especially those who entered credentials or sensitive information, should immediately change passwords, enable two-factor authentication, and monitor for unauthorized account activity. If cryptocurrency wallets were connected, users should move funds to a new wallet and consider revoking token approvals. Suspicious domains like this can be reported to security organizations, browser vendors, or relevant authorities to help prevent further phishing incidents.