VirusTotal
10 / 89
“Pump”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pump.fun-click.stream — Letzter bekanntermaßen aktiv (HTTP 301). Markenidentität: Pump.fun; Betrugstyp: Crypto Scam. Zusammenfassung der Beweislage: VirusTotal 10/89 (BitDefender, Chong Lua Dao, ESET, Forcepoint ThreatSeeker, Fortinet); URLQuery 10 alerts; 1 external blocklist match (ScamSniffer); PhishDestroy score 98/100. Registrar: NameCheap.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
10 / 89
10 threat-system alerts
Meldenchecked — no match recorded
no community references
Meldenprovider verdict: clean
Meldengespeicherter Bericht
Melden Analyse abgeschlossen
Melden14 geprüft — keine Sperren
Checked; no threat flag recorded
Melden| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | verify-modal-2735.vercel.app/solana?id=69b5437c12ce2dac9075215e&bundle=1 |
audit | Hunting_JS_WebAssembly |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| DigiCert UltraDNS | cloudflare-dns.com |
malicious | Sinkholed |
Die Phishing-Domain pump.fun-click.stream gab sich als legitime Pump.fun-Plattform aus, um Nutzer zur Preisgabe von Wallet-Zugangsdaten oder zur Überweisung von Kryptowährungen zu verleiten. Obwohl kein Drainer-Kit identifiziert wurde, bestätigte sich der Betrieb als Krypto-Betrug. Die extrahierten Bitcoin-Adressen (z.B. 14b362c3ed1b5151c1f8bff5a1f4, 1568c5dcd9ccf4a4abf483cba1c7) dienen als Belege für die kriminelle Aktivität. Die Domain ist inzwischen offline, dennoch sollten betroffene Nutzer sofort alle Token-Genehmigungen widerrufen und Gelder auf ein neues, sicheres Wallet transferieren.
Gespeicherte Beobachtungen zum Vergleich zwischen Crawler und Browser für diesen Host sowie eine Echtzeit-Fingerabdruckprüfung für Verkehrsverteilungssysteme im Keitaro-Stil.
L7-Protection/ACMEAnmerkung des Scanners: redirect: raw=redirect_301; http=301; via=http_proxy; location=https://pump.fun-click.stream/; server=L7-Protection/ACME
For the registrable domain fun-click.stream behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
dns2.registrar-servers.comLocation describes the IP network.
72538ff358473058a32f4102b6933a928215d2332cd6785ffb7fc1b52bc915c0Saved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of pump.fun-click.stream · checked Mar 18, 2026
10 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
Von 1 Community-Mitglied gemeldet; erstmals gesehen am 18.03.2026
PD-20260318-E9EA0E Recipient: abuse@namecheap.com Policy Violations: Acceptable Use Policy (AUP): The domain pump.fun-click.stream is engaged in phishing activities, which constitutes a clear violation of your AUP prohibiting illegal activities, fraud, and deception. Terms of Service (TOS): The continued operation of this domain violates your TOS, which reserves the right to suspend or terminate services for any activities that breach legal standards or promote fraudulent conduct. Applicable Laws (IS): Act on Electronic Communications (No. 81/2003): This law prohibits the use of electronic communications for fraudulent purposes, including phishing schemes. Criminal Code of Iceland (No. 19/1940): Under Chapter 27, this code addresses fraud and deception, making phishing a prosecutable offense. Regulatory Note: Failure to act on this report may result in regulatory scrutiny and potential legal consequences for non-compliance with applicable laws and your own policies. Immediate action is recommended to mitigate liability.
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Template-based draft · optional AI wording assistance requires separate consent
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenMelden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenAktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBeobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt