pumlpi[.]fun

PhishDestroy flags pumlpi.fun as a domain actively engaged in generic phishing operations, with no specific brand or drainer kit affiliation identified at this stage. The page title 'View on Pump' suggests a potential impersonation of cryptocurrency pump-and-dump schemes or related trading platforms, though no explicit branding has been confirmed. Given the domain's recent creation (April 05, 2026) and the lack of detections across VirusTotal’s 95 engines, this threat remains in an early stage of deployment, warranting immediate scrutiny. This domain resolves to IP 104.21.49.41 and leverages a Let’s Encrypt SSL certificate, which provides no assurance of legitimacy given the domain’s suspicious activity. The registrar, PDR Ltd. d/b/a PublicDomainRegistry.com, has a neutral reputation with no immediate red flags in this instance. The domain has yet to appear on Google Safe Browsing (GSB) blocklists or other major threat intelligence feeds, further highlighting its stealthy nature. At present, VirusTotal records 2/95 detections, indicating a novel or low-sophistication campaign that could escalate rapidly. The current status of pumlpi.fun is classified as active, with no known takedown efforts or mitigations in progress. Security teams are advised to implement network-level blocks against the resolved IP (104.21.49.41) and monitor for related infrastructure. End users should treat this domain as hostile, avoid interaction, and exercise extreme caution with cryptocurrency-related links. The residual risk remains moderate due to the domain’s recent emergence and lack of widespread detection, but proactive blocking is strongly recommended to prevent potential financial or credential theft.