pmcpump[.]xyz

The domain pmcpump.xyz was registered on 2026-02-21 through Go Daddy, LLC and is currently hosted on an Amazon.com, Inc. (AS16509) infrastructure located in the United States, resolving to IP 216.150.16.1. DNS resolution is handled by ns11.domaincontrol.com and ns12.domaincontrol.com. Service fingerprinting shows the site is built on Vercel and enforces HSTS, with a Let’s Encrypt R12 certificate presenting a valid TLS handshake. An HTTP request returns status code 200 while the page title reports "404: NOT_FOUND," suggesting the site may be serving content conditionally or hiding malicious payloads behind a generic error page. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Reputation scoring from Gridinsoft is 0/100, indicating a lack of trust. VirusTotal analysis shows that 2 of 93 security vendors have flagged the domain, reinforcing the high‑risk classification. The threat type is identified as generic_phishing, and the risk level is marked high with an active status. Defenders should immediately block resolution of pmcpump.xyz at the network perimeter, add the domain to URL filtering policies, and monitor outbound connections to the associated IP address. Continuous DNS logging is recommended to detect any future CNAME or A‑record changes. Because the site returns a generic 404 title despite a successful HTTP response, deeper inspection of the response body and any redirects is advised to uncover potential credential‑stealing pages or payload delivery mechanisms. Ongoing surveillance of the associated IP range (216.150.16.0/24) and the hosting ASN is prudent, as the infrastructure may be reused for additional malicious campaigns.