pumps[.]buzz

This domain, pumps.buzz, presents an elevated risk of credential theft through a phishing scheme designed to mimic legitimate security verification processes. Visitors are likely to encounter fake login prompts or security challenges that harvest sensitive information such as usernames, passwords, or multi-factor authentication codes. The site specifically targets users familiar with Cloudflare security checks, exploiting trust in the brand to deceive victims into disclosing credentials. Analysis indicates this domain was registered on July 12, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with newly created phishing infrastructure. The domain is flagged by 5 out of 95 security vendors on VirusTotal, confirming its malicious intent. It resolves to the IP address 172.67.182.171, which is hosted behind Cloudflare’s network, a common tactic to obscure the true origin of phishing sites and evade detection. The page title 'Un momento…' suggests the use of a loading screen or interstitial page to delay user interaction while malicious scripts execute in the background. If you visited pumps.buzz or entered any information on the site, immediate action is required. First, change passwords for any accounts accessed from the same device or network, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication on all critical accounts if not already active. Scan the device used to visit the site with updated security software to detect and remove any malware or tracking scripts. Monitor accounts for unauthorized activity and report any suspicious transactions or login attempts to the respective service providers. Avoid clicking on links in emails or messages that prompted the visit to this domain, as they may be part of a broader phishing campaign.