# ethrescue.foundation — MALICIOUS

> Avoid ethrescue.foundation—a high-risk phishing domain linked to Ethereum theft scams. Do not interact or share sensitive info.

## Summary
PhishDestroy identifies ethrescue.foundation as an active phishing domain masquerading as an Ethereum-related service named 'Ethereum Theft Fund.' It solicits victims through deceptive claims to counter sell pressure using mathematical models.

The domain was registered on 2025-08-25 via TUCOWS DOMAINS, INC. and resolves to IP 216.198.79.1. It appears on four security blocklists and is flagged for social engineering by Google Safe Browsing. VirusTotal analysis shows detection by 15 of 95 antivirus engines. AlienVault OTX reports it in one notable threat pulse.

Currently active and unremediated, ethrescue.foundation poses a high phishing risk. Users should avoid engagement, and security teams are advised to block and monitor related activity to prevent credential theft or financial loss.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Target brand: compound
- Page title: ETF — Ethereum Theft Fund | Counter Sell Pressure with Math

## Domain Intelligence
- Registered: 2025-08-25 20:02:01
- Registrar: TUCOWS DOMAINS, INC.
- Country: Canada
- IP: 216.198.79.1
- Nameservers: ns1.vercel-dns.com ns2.vercel-dns.com

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ChainPatrol", "alphaMountain.ai", "Bfore.Ai PreCrime", "BitDefender", "CRDF", "CyRadar", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Lionic", "Seclookup", "SOCRadar", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Live Page Content
- Meta description: ETF (Ethereum Theft Fund) is a crypto-punk response protocol that counters ETH Foundation selling with automated tax → stream → buyback → ecosystem mechanics on Base chain.
- Meta title: ETF — Ethereum Theft Fund | Counter Sell Pressure with Math

### Page Text
ETF — Ethereum Theft Fund | Counter Sell Pressure with Math ETF Mechanics Tax Buy ETH RESCUE PROTOCOL Ethereum Theft Fund Counter the sell-pressure. Because of the ETH Foundation fuckery and constant selling, we’re responding the crypto-punk way. $ETF takes a small tax on volume, streams rewards to holders, and channels a treasury cut to buy back ETH for a growing community treasury—then routes that strength back into the broader Ethereum ecosystem. Enter The Countertrade How it Works Token: 0x0E80a143e1682479951a15ef3D35Be8Bc261251A | View on Basescan i // NO GODS. NO MASTERS. JUST MATH. STREAM → BUYBACK → TREASURY → ECOSYSTEM COUNTERING SELL PRESSURE SINCE DAY ONE $ETF: 1% BURN · 2% STREAM · 2% TREASURY NO GODS. NO MASTERS. JUST MATH. STREAM → BUYBACK → TREASURY → ECOSYSTEM COUNTERING SELL PRESSURE SINCE DAY ONE $ETF: 1% BURN · 2% STREAM · 2% TREASURY How it works Every transfer applies a tiny programmable tax. … burn tightens supply, … streams to holders via an intergrated auto-compounding mechanism, and … feeds the treasury to buy back ETH. The result: a constant counter-trade loop aimed at neutralizing sell pressure and strengthening Ethereum’s grassroots. Gasless rewards (no claim tx). Transparent on-chain treasury flow, focused on ETH buybacks. Treasury: 0x… STREAM Auto-compounding rewards via global multiplier; no claim button needed. BUYBACK Treasury accumulates to buy ETH during sell-pressure cycles. BURN 1% burn dials supply down, amplifying the buyback loop. Ready to counter the dump? Grab some $ETF, auto compound it and let the loop spin: tax → stream → buyback → repeat. Buy on DEX View Chart Telegram X © ETF — Community-driven. Not affiliated with the Ethereum Foundation. Docs

### External Links
- https://x.com/ethrescue
- https://basescan.org/token/0x0E80a143e1682479951a15ef3D35Be8Bc261251A

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b149f-b3a9-74b8-95ba-24e292f6c93c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/9a601481-36c6-42a0-98eb-54ecfb3d98fa
- PhishDestroy: https://phishdestroy.io/domain/ethrescue.foundation/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ethrescue.foundation/
Last updated: 2026-03-14