pump-streaming[.]live

This domain is flagged as an elevated-risk generic phishing threat specializing in cryptocurrency fraud. Analysis indicates the infrastructure is designed to mimic legitimate streaming platforms, likely to harvest credentials or distribute malicious payloads under the guise of crypto-related content. The page title 'Pump' suggests an attempt to exploit trending cryptocurrency themes, potentially luring victims with promises of market insights or exclusive trading signals. Infrastructure analysis reveals the domain was registered on May 24, 2026, through Global Domain Group LLC, an unusual future date indicating potential falsification. It resolves to IP 104.21.28.229 and employs Node.js, Vue.js, Nuxt.js, Cloudflare, and HTTP/3 technologies. The domain appears on 4 security blocklists, with 7 out of 95 security vendors on VirusTotal flagging it as malicious. AlienVault OTX lists it in 1 threat intelligence pulse, while Gridinsoft assigns a trust score of 0/100. It is actively blocked by MetaMask, PhishDestroy, SEAL, and Maltrail, confirming its malicious classification. Mitigation requires immediate blocking of the domain and its resolving IP (104.21.28.229) at network perimeter devices. Security teams should monitor for connections to this IP or domain in proxy logs, particularly from endpoints accessing cryptocurrency-related content. End-user education should emphasize verifying domain registration dates (this one shows an implausible future date) and scrutinizing streaming platforms offering crypto services. If credentials were entered, reset them immediately and enable multi-factor authentication on all crypto-related accounts. Network traffic to Cloudflare-hosted domains with similar characteristics (Node.js/Vue.js stacks) should be reviewed for anomalous patterns.