pumpearn[.]cc

Analysis indicates that the domain pumpearn.cc was registered on February 21, 2026 through NiceNIC International Group Co., Limited. The domain currently exhibits a Gridinsoft trust score of 0 out of 100, reflecting a high likelihood of malicious intent. Its HTTP response returns a 403 status code, and it is actively listed as blocked by PhishDestroy. VirusTotal scans show that 4 of 95 security vendors have flagged the domain, confirming that multiple detection engines have identified suspicious behavior. The site remains live as of the report date, July 12, 2026, and is categorized as a generic phishing threat.

Infrastructure analysis reveals that pumpearn.cc resolves to the IP address 94.143.231.148, which is hosted in Germany by dataforest GmbH. The domain uses the nameservers ns3.my-ndns.com and ns4.my-ndns.com, and presents a Let\u2019s Encrypt certificate identified as version E8. The presence of a single security blocklist entry further corroborates its malicious classification. Although the page title merely repeats the domain name and no additional content has been publicly disclosed, the combination of low trust scoring, vendor flags, and blocklist inclusion provides a strong indicator of phishing activity.

Defenders should prioritize immediate containment of traffic to pumpearn.cc. Recommended actions include adding the domain and its resolving IP address to inbound and outbound firewall deny lists, updating DNS filtering policies to block the associated nameservers, and ensuring endpoint protection solutions incorporate the observed VirusTotal detections. Continuous monitoring for any resurgence of the domain or related infrastructure is advised, as threat actors may reuse the same hosting environment for future campaigns.