pumpvolumebot[.]net

On July 22, 2026, analysts observed that www.pumpvolumebot.net was created on July 12, 2026 and is currently active. The domain is registered through Name.com, Inc. and uses Cloudflare authority nameservers beau.ns.cloudflare.com and chelsea.ns.cloudflare.com, indicating reliance on Cloudflare’s CDN and DNS infrastructure. DNS resolution points to the IP address 172.67.141.157, which belongs to Cloudflare’s edge network, a common hosting choice for malicious actors seeking rapid deployment and obfuscation. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that at least one external threat‑intelligence source has identified it as malicious.

VirusTotal reports that the domain has been scanned by 95 vendors; none of the scanners raised a detection, but the absence of a flag does not constitute evidence of benign behavior. No publicly available page title or SSL certificate details were supplied, and no brand or kit attribution was identified, so the specific content hosted at the URL remains unverified. The current evidence supports a classification of generic phishing, consistent with the recent creation date and the use of a reputable registrar coupled with Cloudflare services to host potentially deceptive content.

Defenders should add www.pumpvolumebot.net to URL filtering policies, enforce block‑and‑alert rules in web gateways, and monitor outbound DNS queries for the associated Cloudflare IP range. Continuous re‑scanning with multi‑engine services is advised to detect any future payloads or credential‑stealing pages that may be deployed. Incident response teams should treat any traffic to this domain as hostile and isolate it from internal networks pending further forensic analysis.