pumph[.]fun
Verifica phishing e sicurezza per pumph.fun
“pump”
pumph.fun — Contenuto non disponibile (HTTP 502). Simulazione del marchio: ["curve"]; Tipo di truffa: Crypto Scam. Riepilogo delle prove: VirusTotal 1/94 (alphaMountain.ai); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: Dynadot.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy identifies pumph.fun as a cryptocurrency pump-and-dump phishing site designed to trick users into connecting their wallets to a fake token launch. When victims visit the page titled 'pump,' the site prompts them to link MetaMask or other wallets to claim fraudulent 'PUMP' tokens. Behind the site is IP 188.114.97.3, hosted on infrastructure that has already been blocked by MetaMask and SEAL security filters. The domain resolves via a Google Trust Services SSL certificate, giving it a veneer of legitimacy, but the same certificate is used across multiple known phishing campaigns. This domain was flagged by security vendors after it appeared on two blocklists and was detected by only 1 out of 95 VirusTotal engines as of the latest scan. It was registered on March 14, 2026 through DYNADOT LLC, a registrar often used in bulk domain registrations tied to low-effort scams. The short domain age and high-risk hosting profile suggest this is part of a fast-moving pump-and-dump operation targeting crypto enthusiasts. If you visited pumph.fun, disconnect your wallet immediately and revoke any token approvals through tools like revoke.cash. Do not enter any private keys or seed phrases. Report the domain to your antivirus provider and consider changing passwords if you reused credentials. Always verify token contracts on Etherscan or similar platforms before engaging, and never approve wallet connections on unfamiliar sites.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | ipfs.io |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of pumph.fun · checked Apr 22, 2026
Dati e relazioni esterne
PD-20260422-B33FA4 Recipient: abuse@dynadot.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo