Domain security & threat intelligence

puomp[.]fun

puomp.fun için kimlik avı ve güvenlik kontrolü

“The Cow (FREEDOM) - Pump”

Threat verdict Kritik 100/100 evidence score

Availability İçerik kullanılamıyor En son gözlemde içerik mevcut değildi

Risk signals

VirusTotal algılamaları: 10/95 Saklanan engelleme listesi eşleşmeleri: 3 Marka kimliğine bürünme: Phantom

10/95 VT URLQuery: 100 17.02.2026 Unavailable since 23.02.2026 3 Blocklists Phantom Crypto Scam 5d to unavailable CDN + more

Risk Score: 100 out of 100. Kritik risk.

Rapor özeti

puomp.fun: 95 VirusTotal tarayıcısının 10 tanesi alan adını işaretledi. DNS, SSL, kayıt kuruluşu, engelleme listeleri ve tehdit verilerini inceleyin.

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Evidence Summary

KRITIK

PhishDestroy first recorded puomp.fun on Feb 17, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 100/100.

The latest stored availability state is “İçerik kullanılamıyor” on Aug 1, 2026 at 03:13 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 10 detections from 95 scanners in the stored check on Feb 22, 2026 at 03:00 UTC. The independent blocklist snapshot recorded 3 matches (MetaMask, ScamSniffer, SEAL) across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 3, 2026 at 05:14 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Mar 1, 2026 at 08:57 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 12:31 UTC. That result is not evidence of safety. A URLScan capture is stored from Feb 17, 2026 at 19:02 UTC.

Stored context lists registrar NameSilo, LLC, IP address 188.114.97.3, apparent target Phantom. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal

10 det.

URLQuery

100 det.

URLScan

Report ↗

Gridinsoft

0/100

Observed status

İçerik kullanılamıyor

DestroyList

Listed

Veri kapsamı VirusTotal 10 / 95 URLQuery 100 det. OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict malicious DNS engellemeleri not checked TLS no certificate data WHOIS not parsed Screenshot external capture Yönlendirme zinciri not probed Gridinsoft 0/100

Ağ Güvenliği İstihbaratı Registrar Integrity Alert

Registrar Integrity Alert

This domain is registered via NameSilo — a registrar that publicly lies, shields scammers, and retaliates against researchers.

NameSilo was documented protecting a $20M+ Monero-theft operation (xmrwallet[.]com) across ten continuous years while publicly denying abuse reports that PhishDestroy personally filed 20+ times. When we published the evidence, NameSilo’s response was to get our X account banned — on a justification X’s own automated review later called “no violation.”

Publicly lied about receiving abuse reports — 20+ notices sent by us over 3 years with preserved delivery receipts.
Shielded a $20M+ theft operation for 10 years behind bulletproof DDoS-Guard infrastructure.
Retaliated against researchers by weaponizing X’s abuse channel to silence our account.
Offered to help remove VirusTotal detections for a known phishing domain — on record.

Advisory for researchers, journalists & victims

Expect active deception from NameSilo — not merely abuse-report indifference, but false statements about how many reports they received. After exposure, they will typically claim no reports existed and pressure platforms to remove your published evidence.

Always CC a second authority (compliance@icann.org, sponsoring TLD registry, or CERT/LEA) on every abuse ticket.
Preserve delivery receipts — SMTP return-paths, auto-responder confirmations, ticket IDs.
Archive publicly before publishing — Wayback Machine, archive.today.

Read: How NameSilo Got Our Twitter Banned The $20M xmrwallet Case

Tehdit Müdahale Pipeline

Discovery

Checks

Reports

Availability

17/17

Önleyici Keşif ve Veri Alımı

Tehdit Alındı

1/1 ✓

Tehdit Alındı

puomp.fun tespit edildi ve kapsamlı analiz için sıraya alındı

17.02.2026

Threat Intelligence Checks

URLScan.io Capture · URLScan Verdict · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · Blocklist Detection · Registrar Warning: NameSilo · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · Cloudflare Radar Scan

12/12 ✓

URLScan.io Capture

Stored URLScan report with capture artifacts

17.02.2026

URLScan Verdict

URLScan returned a malicious verdict · score 100

29.07.2026

Cloudflare Radar

Scanned via Cloudflare Radar — DNS, certificates & network data

Web Archive

Preserved in Wayback Machine — historical evidence archived

VirusTotal

10 / 95 vendors flagged on VirusTotal

22.02.2026

Google Safe Browsing

Checked via Google Şeffaflık Raporu

03.03.2026

Engellenenler Listesi Algılama

Şu kaynakta bulunur: 3 blocklists: MetaMask, ScamSniffer, SEAL

02.08.2026

Registrar Warning: NameSilo

Caught publicly lying to protect scam clients & offering VT detection removal. Read investigation

Brand Impersonation

Impersonation of Phantom

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

17.02.2026

Technical Analysis Recorded

The report contains stored technology or forensic-analysis results

02.08.2026

Cloudflare Radar Scan

Scanned via Cloudflare Radar — network analysis completed

07.03.2026

Notification Records

Sent Report Recorded

1/1 ✓

Sent Report Recorded

Stored sent-report record for registrar NameSilo, LLC, hosting provider, 1 abuse contact

abuse@namesilo.com

17.02.2026

Yayın ve Erişilebilirlik

DestroyList Published · Content Observed Unavailable · Time to First Unavailability

3/3 ✓

DestroyList Yayınlandı

Listed in the public PhishDestroy/DestroyList repository

17.02.2026

Content Observed Unavailable

The latest stored checks indicate that the reported content is unavailable; this does not establish who or what caused the change

23.02.2026

Time to First Unavailability

125 hours elapsed from detection to the first unavailable observation

Genel Engelleme Listesi Durumu

Confirmed in 4 datasets: PhishDestroy + 3 independent public blocklists — MetaMask, ScamSniffer, SEAL

Scope: these 10 repositories only; vendor and DNS signals are reported separately above. Last synchronized 02.08.2026. PhishDestroy database match: confirmed.

Kanıt Toplama

Stored Capture

2026-02-17 22:02 UTC

Malicious · 10/95 engines

Forensic screenshot of puomp.fun showing the phishing page layout

IP: 188.114.97.3

NameSilo, LLC

View Full Size URLScan Report Wayback Download

Page Title

The Cow (FREEDOM) - Pump

Impersonates

Phantom

Etki Alanı Analizi

Domainpuomp.fun

URLScan Verdict Malicious score 100 report ↗

Server / ASN cloudflare · AS13335 Cloudflare, Inc.

IP Context Cloudflare shared edge origin IP hidden edge-IP reputation is not attributed to this domain

Registrar NameSilo

(US) PhishDestroy Investigation

Abuse contactabuse@namesilo.com

ICANN Kayıt KuruluşuICANN tarafından resmi olarak akredite edilmiş kayıt kuruluşları →

WHOIS AramaICANN RDAP for puomp.fun →

IP Address 188.114.97.3 CDN

Geo

San Francisco, US

NetworkAS13335 · AS13335 Cloudflare, Inc.

Reverse IPviewdns.info → rapiddns.io →

Origin IP is hidden behind a CDN proxy. Reverse-IP on the edge IP returns unrelated tenants — origin discovery requires passive-DNS or CT cross-reference.

Time to First Unavailability 5 days

What we count Elapsed time from the first stored abuse report to the first observation that puomp.fun was unavailable. This does not establish the cause.

What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.

Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları

İlk Kez Tespit Edildi17.02.2026

Nameserversaleena.ns.cloudflare.comcorey.ns.cloudflare.com

Case IDPD-20260217-4F1C77

ICANN OVERSIGHT

Accreditation and RAA context

ICANN Parasını Aldı. Hesap Verebilirlik Gelmedi.

Bu gTLD için, yukarıdaki alan adı kayıt kuruluşu bir ICANN sözleşmesi kapsamında faaliyet gösterir. ICANN; kayıt, yenileme ve transferlerle bağlantılı yıllık, değişken ve işlem bazlı ücretler tahsil eder.

Akreditasyon: paraya çevrildi. Hesap verebilirlik: lütfen daha sonra tekrar kontrol edin.

Sonra sihir başlar: ICANN RAA §3.18'i yazar, alan adı kayıt kuruluşu kendi müşteri tabanındaki kötüye kullanımı soruşturur ve her katman bir başkasının harekete geçmesini beklerken mağdurlar kanıtları ücretsiz sunar. Bu, mağdurların kendilerini daha güvende hissetmelerini sağlıyorsa harika—demek ki fatura işe yaramış.

Akreditasyon bir sözleşmedir, güvenlik mührü değil. ICANN ücretlerini doğrulayın RAA §3.18'i okuyun PHISHDESTROY INVESTIGATIONICANN Karteli: Uygulanmayan sözleşmelere yılda 155 milyon dolar

Hesap verebilirlik üzerine hicivli not Hiçbir şey otomatik olarak gönderilmez.

Adli İstihbarat

External Scripts 1

https://performance.radar.cloudflare.com/beacon.js

Bu Alan Adını Bildir Kanıt sunun ve başkalarını korumaya yardımcı olun

VirusTotal Analizi

10 / 95 security vendors flagged this domain

View on VT

ADMINUSLabs

alphaMountain.ai

Cluster25

CRDF

CyRadar

Gridinsoft

Kaspersky

Lionic

Seclookup

SOCRadar

Arşivlenmiş Kanıtlar

Wayback Machine Snapshot

A historical snapshot is available for evidence review

View Archive

Kanıtlar ve Dış Raporlar

Güvenlik Analizi

URLScan Malicious VirusTotal 10 det. ChainPatrol URLQuery 100 det. Gridinsoft 0 trust SSL Labs CF Radar Open report WOT ScamAdviser Kara Liste Kontrol Aracı URLVoid Sucuri SiteCheck MDN Gözlemevi

OSINT ve İstihbarat

Web-Check Full scan Shodan Censys ThreatFox Hudson Kayası IntelX crt.sh Certs WHOIS Wayback Archived

DNS ve Ağ

nslookup.io DNS bgp.tools ASN/Route

SEO ve Alan Adı

SpyFu Moz DA/PA Ahrefs Backlinks Derinlemesine Analiz

Bu Siteden Etkilendiniz mi?

Yalnız değilsin ve utanacak hiçbir şey yok. Dolandırıcılar, güveni suistimal eden sofistike suçlulardır. Yaşadıklarınızı bildirmek, dolandırıcılığa karşı en etkili silahtır — yaptığınız bildirim, başkalarının mağdur olmasını önleyebilir ve kolluk kuvvetlerinin harekete geçmesine yardımcı olabilir. Sessizlik, dolandırıcıların en büyük avantajıdır. Kır şunu.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

FBI IC3

Report internet-enabled crime in the United States

FBI hotline1-800-CALL-FBI

Europol

Find the official reporting channel for your EU country

National police directory

Action Fraud

Report fraud and cyber crime in England, Wales and Northern Ireland

Contact centre0300 123 2040

PhishDestroy listing review Not a law-enforcement report

Alan Adı İtirazı

Request a review if you own this domain and believe the listing is incorrect

Kurtarma dolandırıcılarına dikkat edin! Suçlular, araştırmacı, avukat veya kurtarma görevlisi gibi davranarak mağdurlarla tekrar iletişime geçebilir. Peşin ücret ödemeyin veya kimlik bilgilerinizi paylaşmayın. Geri ödeme dolandırıcılığı hakkında daha fazla bilgi edinin →

Yerel Yetkililere Bildirin

Bilgi almak için ülkenizi seçin siber suçlarla ilgili resmi irtibat noktaları, or create a complaint draft →

Ülkenizi seçin...

97-country directory

AI-assisted draft — incident details are processed by the AI provider Review and submit it yourself

About This Report: puomp.fun

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “The Cow (FREEDOM) - Pump”, which may be designed to impersonate Phantom.

puomp.fun has been flagged by 10 security vendors as of August 2, 2026.

Bu listenin hatalı olduğunu düşünüyorsanız itirazda bulunmak. Metodolojimiz hakkında bilgi edinmek için SSS sayfası adresini ziyaret edin.

Gelişmelerden Haberdar Olun, Güvende Kalın

Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin

Canlı Tehdit Akışı Bu İlanı İtiraz Et

HTML · IFRAME

Bu Raporu Yerleştir

Bu tehdit bilgisini web sitenizde veya blogunuzda paylaşın

embed.html

<iframe
  src="https://phishdestroy.io/tr/embed/domain/puomp.fun"
  title="PhishDestroy threat report for puomp.fun"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

puomp[.]fun

This domain is registered via NameSilo — a registrar that publicly lies, shields scammers, and retaliates against researchers.

Tehdit Müdahale Pipeline

Genel Engelleme Listesi Durumu

Kanıt Toplama