xn--pump-vra[.]fun

The domain xn--pump-vra.fun is flagged as a generic phishing domain. No specific brand or drainer kit is associated with this domain. The domain's infrastructure and technical indicators suggest a potential risk to users and systems.

Analysis indicates that the domain was created on March 02, 2026, and is registered through Dynadot LLC. It resolves to the IP address 188.114.96.3. The domain is currently offline, but it has appeared on 4 security blocklists, including MetaMask, PhishDestroy, SEAL, and Maltrail. VirusTotal shows 0/95 detections, indicating that it has not been flagged by most security engines. The Gridinsoft trust score is 0/100, which is the lowest possible score, further emphasizing the domain's suspicious nature. The domain uses several technologies, including Apple iCloud Mail, Amazon Web Services, Vercel, web-vitals, Unpkg, LaunchDarkly, HSTS, and Google Tag Manager, and has an SSL certificate issued by Google Trust Services.

Despite the domain being taken offline, the risk level remains under investigation. The low VirusTotal detection rate and the presence on multiple blocklists suggest that the domain may have been used in recent phishing campaigns. Organizations and individuals should remain vigilant and avoid interacting with any links or content associated with this domain. Continuous monitoring and updating of security blocklists are recommended to mitigate any residual risks.