xn--live-pmp-dzb[.]fun

The domain xn--live-pmp-dzb.fun has been identified as a generic phishing site with an elevated risk level. This domain does not appear to be targeting any specific brand or using a particular drainer kit, but it poses a significant threat due to its presence on multiple security blocklists and its use of a default Apache2 Ubuntu page, which often indicates a recently compromised or newly set up server.

Infrastructure analysis reveals that the domain was created on March 02, 2026, and is registered through Dynadot LLC. It resolves to the IP address 188.114.97.3 and uses a Let's Encrypt SSL certificate. Analysis indicates that 3 out of 95 security vendors on VirusTotal have flagged this domain as malicious. Additionally, it appears on 4 security blocklists and has a Gridinsoft trust score of 0/100, reflecting a high level of suspicion. The domain is currently offline, which may indicate that the threat actors have ceased operations or that the domain has been taken down by authorities or the hosting provider.

Despite the domain being offline, organizations should remain vigilant. It is recommended to block access to this domain and its associated IP address to prevent any potential residual threats. Continuous monitoring of network traffic and user activity for any signs of similar phishing attempts is advisable. The risk remains elevated due to the domain's presence on multiple blocklists and its low trust score, suggesting that it has been used in previous phishing campaigns.