Lompat ke laporan keamanan
⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 1. Daftar blokir publik yang melaporkan kecocokan: 1. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
4 months
Reports sent
1
Current status
HTTP 301 at latest stored check
Keamanan domain dan intelijen ancaman

pump[.]fun-stream[.]chat

“Pump”

Putusan ancaman Kritis 71/100 skor bukti
Ketersediaan Terakhir diketahui aktif Pengamatan keterjangkauan tersimpan terbaru
Deteksi Total Virus: 1/94 Daftar blokir yang disimpan cocok: 1 URLQuery threat systems: 9 alerts Peniruan identitas merek: Apple Terakhir diketahui aktif
14/03/2026 Apple 1 Report Sent
Ringkasan bukti
KRITIS
Skor
71/100

This domain, pump.fun-stream.chat, was observed on July 22, 2026 and is currently listed as offline. The domain was registered on March 14, 2026 through Porkbun LLC, as indicated by the three Porkbun nameservers (maceio.ns.porkbun.com, curitiba.ns.porkbun.com, salvador.ns.porkbun.com). DNS resolution returned the IPv4 address 31.57.34.181, which belongs to AS207994 (Blockchain Creek B.V.) and is geolocated in the Netherlands. An HTTPS certificate issued by Let’s Encrypt (R12) was valid for the host at the time of observation, confirming that TLS was correctly configured despite the site being unavailable. Web‑server analysis showed a 502 HTTP response, and the underlying application stack was identified as Node.js running on Express.

The page title returned by the server was “Pump”, and no additional content was captured. Threat intelligence sources classified the activity as a tech‑support scam that impersonates Apple, consistent with the listed brand target “apple”. VirusTotal scanned the domain and recorded a single positive detection out of 94 security vendors. Independent blocklists PhishDestroy and ScamSniffer have also added the domain to their watchlists, bringing the total count of public blocklist entries to two. Because the site is presently offline, real‑time content cannot be examined, leaving the exact phishing landing page and credential‑capture mechanisms unverified.

However, the combination of a recent creation date, the use of a reputable registrar, a legitimate‑looking SSL certificate, and the presence of a Node.js/Express stack aligns with known patterns employed by actors that host brand‑impersonation scams. Defenders should continue to monitor the address 31.57.34.181 for any re‑hosting activity, enforce URL filtering for the full domain, and update endpoint protection signatures to reflect the single VirusTotal detection. Network traffic to the identified nameservers and the IP address should be logged and, where possible, blocked.

Catatan laporan keluar

Snapshot bukti yang dikirim

Dikirim
Catatan buku besar
1
ID kasus
PD-20260314-A18623
Judul halaman yang direkam
Pump
Artefak PDF
Bukti PDF
Teks bukti lengkap
Policy Violations:
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Applicable Laws (Unknown):
International Anti-Cybercrime Regulations
Budapest Convention on Cybercrime
Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
VirusTotal
VirusTotal
1 det.
URLQuery
URLQuery
9 threat alerts
Sertifikat TLS
Let's Encrypt
Usia
5 mo
Status terpantau
Terakhir diketahui aktif 301
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
1
Cakupan data VirusTotal 1 / 94 URLQuery 9 threat-system alerts PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS valid certificate, 48d WHOIS 5 mo old Tangkapan layar 3 captures · 3 sources Rantai pengalihan tidak diselidiki
Intelijen Keamanan Jaringan
Threat Detection Systems 9 alerts
Detection System Indicator Verdict Alert
Private YARA rules link-auth-542.vercel.app/solana?id=69b5437c12ce2dac9075215e&bundle=1 audit Hunting_JS_WebAssembly
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rules pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif malware Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
12/13

Cakupan daftar blokir

10 sumber · disinkronkan 10/08/2026

Tangkapan tersimpan

Judul Halaman
Pump
Impersonates
Apple Base Blur Curve Phantom Revolut Scroll Solana
Sertifikat TLS
Valid transport encryption · Diterbitkan oleh Let's Encrypt · valid for 48 days

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN L7-Protection · AS207994 Blockchain-Creek Blockchain Creek B.V., BE
Reputasi IP abuse score 0/100 2 reports checked 14/07/2026
Registrar (base domain) Porkbun US(US)
Alamat IP 31.57.34.181 NL
LokasiNL Amsterdam, NL
JaringanAS207994 · Blockchain Creek B.V.
Registration (base domain)fun-stream.chat · Dibuat 14/03/2026 (148d)
Status HTTP301 Moved Permanently
Elapsed Since First Report 35h
Yang kami hitung Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Terakhir diketahui aktif.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
Detail teknisDNS, nama TLS, dan stempel waktu
Pertama Kali Terdeteksi14/03/2026
DOM Analysisanalyzed 24/03/2026score 71/1008 brand signals
Submitted URLhttp://pump.fun-stream.chat/
Server namafortaleza.ns.porkbun.com
Sidik jari TLS
Pengamatan TLSberlaku sejak 01/02/2026dipindai 15/03/2026
ICANN OVERSIGHT Registration: fun-stream.chat

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For the registrable domain fun-stream.chat behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Tidak ada yang dikirim secara otomatis.
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

1 / Vendor keamanan 94 menandai domain ini
View on VT
Last analyzed
SOCRadar
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of pump.fun-stream.chat · checked Mar 14, 2026

51
Needs Work
Performance
FCP
5.34s
First Contentful Paint
LCP
15.77s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
264ms
Total Blocking Time
SI
17.78s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Apakah Anda Terpengaruh oleh Situs Ini?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri

Periksa Domain Apa Pun

Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik

Pindai Sekarang

Laporkan Phishing

Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas

Laporan

Pemberitahuan Ancaman Real-Time

Laporan phishing terbaru dan perubahan ketersediaan yang diamati

Pantau

Tetap Terinformasi, Tetap Aman

Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive

Pemberitahuan Ancaman Real-Time Ajukan Banding Terhadap Iklan Ini

Alat eksternal

HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/pump.fun-stream.chat"
  title="PhishDestroy threat report for pump.fun-stream.chat"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.