# pumpbtcxyz.com — MALICIOUS

> pumpbtcxyz.com is flagged for phishing. Avoid interacting with this domain as it poses a medium risk. Stay vigilant and protect your data.

## Summary
PhishDestroy identifies pumpbtcxyz.com as a medium-risk phishing domain targeting unsuspecting users, likely aiming to harvest sensitive information under false pretenses. The phishing activity associated with this domain poses a threat to users attempting to engage with cryptocurrency-related content.

Technical analysis reveals pumpbtcxyz.com was registered on February 21, 2026, through a now-defunct registrar. The domain was flagged by 7 out of 95 antivirus engines on VirusTotal and is included in four separate security blocklists. Additionally, AlienVault OTX has recorded it in a threat intelligence pulse, indicating ongoing monitoring by cybersecurity communities.

Currently, pumpbtcxyz.com has been taken offline, reducing immediate risk. However, users and organizations should remain cautious, avoid any communications or transactions linked to this domain, and ensure email and web filters are updated to block it. Continuous vigilance and rapid response remain essential to prevent exposure to similar phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 0)
- Page title: Cloudflare Tunnel error | pumpbtcxyz.com | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: NameCheap, Inc.
- Country: US
- IP: 172.67.192.98
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["chloe.ns.cloudflare.com", "donovan.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["alphaMountain.ai", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "Seclookup", "SOCRadar", "Sophos"]
- Google Safe Browsing: clean
- Blocklists: 4 hits
  Lists: ["PhishDestroy", "MetaMask", "ScamSniffer", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a30ad-746d-7335-bf2b-8e7f68da16f0.png
- PhishDestroy: https://phishdestroy.io/domain/pumpbtcxyz.com/
- LLM endpoint: https://phishdestroy.io/domain/pumpbtcxyz.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pumpbtcxyz.com/
Last updated: 2026-03-19