immediatepump-invest[.]com

immediatepump-invest.com was observed to host a brand‑impersonation page targeting the “base” brand. The site’s HTML title reads “Immediate Pump - Piattaforma Ufficiale | Trading IA 2025 | Oltre 10.000 Recensioni”, which indicates a purported trading service and suggests a crypto‑related scam. The domain was registered on 21 February 2026 via the registrar Name SRS AB and is served through Cloudflare’s DNS (amir.ns.cloudflare.com, marlowe.ns.cloudflare.com). DNS resolution points to the address 104.21.45.73, an IP owned by AS13335 (Cloudflare, Inc.) located in the United States. No SSL certificate is presented, meaning the site is only reachable via HTTP.

Reputation checks show a Gridinsoft trust score of 0 / 100 and detection by a single security blocklist. The domain appears in one AlienVault OTX pulse and has been blocked by the PhishDestroy list. VirusTotal analysis recorded 2 detections out of 93 scanning engines, confirming that external scanners have flagged the domain as malicious. The site’s current HTTP status is offline, indicating that the malicious content has been taken down or the server is no longer responding.

While the page title and scam type (“Crypto Scam”) provide strong indicators of fraudulent intent, the absence of an SSL certificate and the offline status limit further technical observation. No additional payload samples, URL paths, or phishing landing‑page screenshots have been disclosed. Defenders should continue to monitor the domain’s IP address and associated Cloudflare edge nodes for any resurgence, enforce blocking of the domain and its IP at perimeter defenses, and include the domain in threat‑intel feeds. Correlation with other observed “base” brand impersonation campaigns may reveal shared infrastructure, and any future re‑registration should be flagged automatically.