xn--pnp-8na[.]fun

This domain, xn--pnp-8na.fun, is flagged as a generic phishing threat targeting cryptocurrency users through deceptive tactics. The site appears to promote a fraudulent "pump" scheme, a common scam where victims are tricked into transferring funds under false promises of high returns or coordinated price manipulation. Such schemes often lead to financial losses, as funds sent to attacker-controlled wallets are irrecoverable. The domain’s infrastructure and content are designed to mimic legitimate crypto trading platforms, increasing the risk of user deception. Analysis indicates the domain was created on March 07, 2026, and registered through Dynadot LLC, a registrar frequently used for both legitimate and malicious domains. Despite its recent creation, the site has already been blocked by five security blocklists, including MetaMask and PhishDestroy, and is flagged by Google Safe Browsing for social engineering. VirusTotal reports 0 out of 95 security vendors detecting the domain as malicious, suggesting it may still evade some automated detection systems. The site resolves to the IP address 172.67.191.196, which is associated with Cloudflare, a content delivery network often leveraged to obscure the true origin of malicious infrastructure. Users who visited xn--pnp-8na.fun should take immediate action to mitigate potential risks. If any cryptocurrency transactions were initiated, revoke all connected wallet permissions and transfer remaining funds to a new, secure wallet. Monitor accounts for unauthorized activity and report the incident to relevant platforms or authorities. Additionally, scan devices for malware, as phishing sites may deploy malicious scripts or payloads. Avoid interacting with similar domains, especially those promising unrealistic returns or using urgent language to pressure users into action.