pzump[.]fun
“Subway Queen (SUBWAY) - Pump”
साक्ष्य सारांश
The domain pzump.fun was a cryptocurrency phishing site engaged in brand impersonation targeting the Phantom wallet. It posed as a legitimate Phantom service to deceive users into connecting their wallets, potentially leading to unauthorized fund transfers. No drainer kit was identified, but the site was classified as a scam and has since been taken offline.
Technical analysis of pzump.fun revealed 10 of 95 VirusTotal security vendors flagged the domain, including ADMINUSLabs, alphaMountain.ai, and Cluster25. It was registered through NameSilo, LLC on February 21, 2026, and resolved to the IP address 104.21.39.74, hosted on Cloudflare's network (AS13335). The domain appeared on one security blocklist, PhishDestroy, and had no SSL certificate. The observed page title was 'Subway Queen (SUBWAY) - Pump', which did not align with the impersonated Phantom brand. Nameservers were cris.ns.cloudflare.com and stevie.ns.cloudflare.com.
Users who interacted with pzump.fun should immediately revoke any token approvals granted to the site via their wallet settings and transfer remaining funds to a new, secure wallet. Enable two-factor authentication on all accounts and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts. If financial loss occurred, contact local law enforcement or cybercrime reporting agencies.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260210-E67921- PDF दस्तावेज़
- PDF प्रमाण
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain pzump.fun is engaged in phishing activities, which constitute a clear violation of your AUP prohibiting illegal activities and fraud.
Terms of Service (TOS): The ongoing use of this domain for deceptive practices allows for immediate suspension or termination of services as outlined in your TOS.
Applicable Laws (US):
Computer Fraud and Abuse Act (18 U.S.C. § 1030): This law prohibits unauthorized access to computers and the fraudulent use of information obtained, which applies to phishing schemes.
Wire Fraud (18 U.S.C. § 1343): The use of electronic communications to execute a scheme to defraud, including phishing, is a violation of this statute.
CAN-SPAM Act (15 U.S.C. § 7701 et seq.): This act regulates commercial email and prohibits misleading headers and deceptive subject lines, both of which are utilized in phishing attacks.
Regulatory Note: Failure to take immediate action against the domain pzump.fun may result in liability under applicable laws and could expose your organization to regulatory scrutiny. Prompt compliance with your AUP and TOS is essential to mitigate potential legal repercussions.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
पहचान समयरेखा
-
Cloudflare Radar
Cloudflare Radar स्कैन संग्रहीत · स्कैन खोलें
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।