MALICIOUS — CRITICAL
fundaraincs.com Fake Investment Portal Alert
fundaraincs[.]
PhishDestroy identifies fundaraincs.com as an active phishing domain masquerading as an investment portal, designed to trick users into disclosing financial credentials or transferring funds.
- VirusTotal
- 7/91
- Blocklists
- 2 · MetaMask, SEAL
- التوفر
- آخر نشاط معروف · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@registrar.eu.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
fundaraincs.com — آخر نشاط معروف (HTTP 200). نوع الاحتيال: Investment Scam. ملخص الأدلة: VirusTotal 7/91 (ChainPatrol, alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Gridinsoft); URLQuery 3 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 85/100. مسجّل النطاق: Hosting Concepts.
يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.
Evidence Analysis
PhishDestroy identifies fundaraincs.com as an active phishing domain masquerading as an investment portal, designed to trick users into disclosing financial credentials or transferring funds. The site leverages a recently registered domain, a Let’s Encrypt SSL certificate, and hosting on a server previously linked to abuse to appear legitimate. MetaMask and SEAL have already blocked access, and the domain has been flagged on security blocklists, indicating widespread suspicion of its activities.
This domain was flagged with 0 detections on VirusTotal despite being registered through Hosting Concepts B.V. (Registrar.eu) on April 27, 2026, and resolving to IP 198.251.88.6. Security vendors are still assessing its behavior, but its inclusion on multiple blocklists and blocking by major platforms like MetaMask suggest a high likelihood of malicious intent. The domain’s age and lack of detections make it a moving target, with attackers likely iterating rapidly to evade detection.
If you visited fundaraincs.com, avoid entering any credentials, payment details, or personal information. Disconnect from the network immediately and scan your device for malware or unauthorized access. Report the domain to your IT team or security provider, and consider changing passwords for any accounts exposed to this site. Monitor financial transactions closely for unauthorized activity, and use a reputable security tool to verify links before clicking.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
نطاق تغطية البيانات12 recorded checks
استخبارات أمن الشبكات
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/0980151a/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| Hagezi Threat Feed | fundaraincs.com |
malicious | Sinkholed |
| Quad9 DNS | fundaraincs.com |
malicious | Sinkholed |
مسار الاستجابة للتهديدات Pipeline
حالة قوائم الحظر العامة
لقطة محفوظة
معلومات النطاق
التفاصيل الفنيةDNS، أسماء المجال البديلة (SAN) في بروتوكول SSL، الطوابع الزمنية
ICANN OVERSIGHT
الاعتماد وسياق RAA
الاعتماد وسياق RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
التقنيات · 9 identified
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com ثقة 100٪Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com ثقة 100٪Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.
momentjs.com ثقة 100٪jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com ثقة 100٪Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org ثقة 100٪HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org ثقة 100٪تحليل VirusTotal
تحليل أداء الموقع
Google PageSpeed Insights — mobile performance audit of fundaraincs.com · checked Apr 30, 2026
الأدلة والتقارير الخارجيةIndependent lookups and source reports
PD-20260430-5CA27A Recipient: abuse@registrar.eu Victim safety and official reportingImmediate actions and verified reporting channels
إذا أدخلت بيانات اعتماد الحساب أو المعلومات الشخصية أو معلومات الدفع أو قمت بتنزيل ملف من هذا النطاق، فاتخذ إجراءً فوريًا. فيما يلي موارد لمساعدتك في الإبلاغ عن الحادث وحماية نفسك.
أبلغ السلطات المحلية
حدد بلدك للحصول على الاتصالات الرسمية المتعلقة بالجرائم الإلكترونية أو إنشاء مسودة شكوى →.