pundu-publicsale[.]com

The domain pundu-publicsale.com is a phishing site engaged in brand impersonation targeting the Solana cryptocurrency ecosystem. It posed as a legitimate token public sale page under the name 'PUNDU Token Public Sale' to deceive users into interacting with fraudulent investment schemes. No crypto drainer kit was identified, but the site's elevated risk level stems from its attempt to exploit Solana's brand reputation. The domain is currently taken offline, reducing immediate exposure.

Technical indicators confirm pundu-publicsale.com's malicious intent. The domain was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned it a trust score of 0/100. It appeared on 1 security blocklist (PhishDestroy) and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. in the US. The registrar was ARIN, though the creation date remains unavailable. No SSL certificate was present, and the domain used a single nameserver. Google Safe Browsing did not flag the site at the time of analysis.

Users who interacted with pundu-publicsale.com should assume their credentials or wallet details may be compromised. For crypto-related activity, revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Enable two-factor authentication (2FA) on all accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the impersonated brand (Solana) to aid in broader takedown efforts.