Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@globaldomaingroup.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pump-rescue[.]fun
Análisis de phishing y seguridad de pump-rescue.fun
“Pump.fun Cashback | Get 70% Back on Rug Pull Losses”
pump-rescue.fun — Último activo conocido (HTTP 200). Suplantación de marca: Pump.fun; Tipo de estafa: Crypto Scam. Resumen de las pruebas: VirusTotal 2/93 (Gridinsoft, SOCRadar); URLQuery 12 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 78/100. Registrador: Global Domain Group.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain pump-rescue.fun presents an elevated risk level and is identified as a brand impersonation threat. This domain poses a significant risk to users who may be misled into believing it is associated with the legitimate brand Pump.fun, potentially leading to financial loss or other malicious outcomes.
Analysis indicates that pump-rescue.fun was created on March 02, 2026, and is registered through Global Domain Group LLC. The domain resolves to the IP address 77.105.161.240 and has been detected using Ubuntu and Nginx as the underlying technologies. It has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The domain is currently offline and appears on 4 security blocklists. Additionally, 2 out of 95 security vendors on VirusTotal have flagged this domain, suggesting that it may have been active in malicious activities before being taken offline. The page title, 'Pump.fun Cashback | Get 70% Back on Rug Pull Losses,' clearly aims to impersonate the legitimate brand Pump.fun.
To mitigate the risks associated with brand impersonation, users should avoid clicking on links or visiting the domain pump-rescue.fun. It is recommended to verify the legitimacy of any website claiming to offer services related to Pump.fun through official channels. Users should also be cautious of unsolicited emails or messages that direct them to this domain and should report any suspicious activity to their respective security teams or organizations. Implementing browser extensions that block known phishing domains can provide an additional layer of security. Regular updates to security software and maintaining awareness of common phishing tactics can help prevent falling victim to such threats.
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | j2tzzk.vercel.app/demo.php?id=69923965562d44580b7b4501&parent_url=pump-rescue.fun%2f |
audit | Hunting_JS_WebAssembly |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif |
malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Hagezi Threat Feed | pump-rescue.fun |
malicious | Sinkholed |
| DNS4EU | pump-rescue.fun |
malicious | Sinkholed |
| DigiCert UltraDNS | cloudflare-dns.com |
malicious | Sinkholed |
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologías · 2 identified
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
Análisis de VirusTotal
Evidencias archivadas
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of pump-rescue.fun · checked Jun 26, 2026
Datos y informes externos
PD-20260302-15F394 Recipient: abuse@globaldomaingroup.com ¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.