pump-quest[.]com

pump-quest.com is a newly registered domain (created 21 Feb 2026) that has been classified as a generic phishing site. The domain resolves to a single IPv4 address, 104.21.9.129, and is currently listed as active. It is hosted behind Cloudflare’s network and uses a Google‑issued TLS certificate (WE1). The registration was performed through NameCheap, Inc., and the domain’s nameservers are gerardo.ns.cloudflare.com and peaches.ns.cloudflare.com.

Infrastructure analysis shows the address belongs to the Cloudflare network (AS13335) located in the United States. The presence of HTTP/3 support and the Cloudflare CDN indicates the operator is leveraging a widely trusted service to obscure the true origin of the payload. The TLS certificate is valid, which may increase user confidence despite the malicious intent.

Reputation data corroborates the phishing classification. The domain appears on two independent blocklists—PhishDestroy and ScamSniffer—and receives a Gridinsoft trust score of 0 out of 100. VirusTotal scans have resulted in six out of ninety‑five security vendors flagging the domain as malicious. The HTTP response code is 200, yet the page title returned is “pump-quest.com | 522: Connection timed out,” suggesting the site may be intermittently unavailable or employing a decoy error page to evade automated crawlers.

Defenders should treat pump-quest.com as high‑risk and enforce immediate blocking at network perimeter and endpoint layers. Continuous monitoring of the associated IP address (104.21.9.129) is advised, as Cloudflare may allocate additional addresses to the same actor. Updating threat intelligence feeds with the domain and its aliases will help prevent accidental exposure. Incident response teams should also consider the domain’s short lifespan and recent creation date as indicators of a fast‑flux phishing campaign.