meondot[.]fun

PhishDestroy identifies the active domain www.meondot.fun as a generic crypto drainer campaign. The domain is currently under investigation for distributing malicious payloads intended to drain cryptocurrency wallets. No specific brand impersonation has been confirmed at this stage, but the threat type remains classified as a crypto drainer due to observed behavior patterns in similar campaigns.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely recognized as malicious. It resolves to IP 64.29.17.1, is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and was created on February 28, 2026. The domain utilizes a Let's Encrypt SSL certificate, which may be leveraged to establish false trust with potential victims. No known blocklist entries or trust score data are currently available for this domain.

The current status of this domain is active, and users are strongly advised to avoid interaction. Organizations and individuals should block this domain at the network perimeter and update threat intelligence feeds accordingly. Users who may have interacted with this domain should scan their systems for unauthorized cryptocurrency wallet access and revoke any suspicious permissions. Immediate reporting to relevant cybersecurity authorities is recommended to aid in broader detection efforts.