pumbp[.]fun

This domain, pumbp.fun, is identified as a credential theft operation targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate authentication portals to harvest usernames, passwords, and session tokens, which are then exploited for unauthorized account access or sold on underground forums. The threat extends to potential follow-up attacks, including financial fraud or lateral movement within compromised networks. Infrastructure analysis reveals the domain resolves to IP address 172.67.197.25 and was registered through NameSilo, LLC on April 16, 2026. VirusTotal detection metrics show 6 out of 95 security vendors flagging the domain as malicious, while it appears on 2 distinct security blocklists. The SSL certificate, issued by Let’s Encrypt, does not mitigate the risk, as the domain’s content and behavior remain inherently malicious. Additional intelligence sources confirm its presence in 1 threat intelligence pulse, reinforcing its classification as a high-confidence threat. Users who visited pumbp.fun should immediately terminate any active sessions and reset credentials for accounts accessed during the exposure window. Enable multi-factor authentication on all critical services to mitigate unauthorized access. Monitor accounts for suspicious activity, such as unrecognized logins or transactions, and report anomalies to the respective service providers. If financial or personal data was entered, consider placing fraud alerts with relevant institutions to prevent further exploitation.