pump-vision[.]xyz

On July 20, 2026 the analyst team observed that the domain pump-vision.xyz is currently active and classified as a high‑risk generic phishing infrastructure. The domain was registered on March 12, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and points to the IPv4 address 188.114.97.3. DNS resolution is served by the Cloudflare authoritative name servers jade.ns.cloudflare.com and piotr.ns.cloudflare.com. VirusTotal has recorded detections from three of ninety‑five scanning engines, indicating that a minority of security vendors have identified malicious behavior associated with the host. The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy mitigation service, providing an additional layer of protection for downstream networks. No public evidence of SSL certificate details, HTTP response codes, Safe Browsing verdicts, or Open Threat Exchange (OTX) reports is available at this time, leaving those vectors unverified. The limited detection footprint suggests that the infrastructure may be newly deployed, consistent with the recent creation date. Defenders should add pump-vision.xyz to URL filtering rules, enforce DNS sink‑hole or blocklist entries that include the domain, and monitor traffic to the associated IP address for anomalous patterns. Continuous re‑scanning with multi‑engine services is recommended to capture any future changes in vendor detection status. Organizations that rely on email or web gateway controls should ensure that outbound connections to the domain are denied, and incident response teams should collect any logs that reference the domain for further forensic correlation.