pundu[.]live

Analysis of the domain pundu.live indicates it is under investigation for phishing activity as of August 06, 2026. The domain was registered on August 02, 2026, through Global Domain Group LLC, a registrar frequently associated with newly observed malicious infrastructure. Infrastructure analysis reveals the domain resolves to the IP address 172.67.202.12, which is part of Cloudflare’s network, a common hosting choice for both legitimate and malicious sites due to its privacy and protection features. The nameservers fonzie.ns.cloudflare.com and luciana.ns.cloudflare.com further confirm Cloudflare’s involvement in its DNS configuration.

At the time of this report, pundu.live appears on one security blocklist, specifically PhishDestroy, which suggests preliminary detection by at least one vendor. However, a VirusTotal scan conducted by 91 security vendors returned no detections, though this absence does not confirm the domain’s safety or legitimacy. The domain’s content has not been fully analyzed, and the specific brand or service being impersonated remains unidentified. No HTTP status, SSL certificate details, or page title data were provided in available intelligence, limiting further assessment of its operational behavior.

Defenders are advised to treat pundu.live as suspicious based on its recent registration, use of Cloudflare for potential obfuscation, and inclusion on a phishing-focused blocklist. Network-level blocking or monitoring of connections to 172.67.202.12 may mitigate potential exposure. Given the domain’s active status and lack of widespread detection, continued observation and updated scans are recommended to determine if additional security vendors flag it in the future. Organizations should correlate this domain with other indicators of compromise, particularly if user reports of credential harvesting or unauthorized access emerge.