claimpump[.]live

The domain claimpump.live was registered on February 21 2026 through Web Commerce Communications Limited. DNS resolution points to IP 142.251.163.104, which belongs to AS15169 Google LLC and resolves to a United States location. The domain is delegated to Cloudflare name servers terin.ns.cloudflare.com and emerie.ns.cloudflare.com, indicating use of Cloudflare’s DNS and edge services. No WHOIS privacy protection is observed, and the registration timestamp places the domain firmly within the current year, limiting any presumption of historical benign use.

Network analysis shows the site is served over HTTP/3 and presents a TLS certificate issued by Google Trust Services under the WE1 label, matching the certificate chain commonly used by legitimate Google services. The page title returned by the server is “Google”, directly mirroring the target brand and reinforcing the visual impersonation strategy. The use of Cloudflare infrastructure and modern protocol support suggests an attempt to achieve both performance and evasion of basic network filters.

Threat intelligence sources label claimpump.live as a brand‑impersonation campaign targeting Google users, with a declared scam type of cryptocurrency. The domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal records five out of ninety‑five security vendors flagging the domain, and Gridinsoft assigns a trust score of 0 / 100, indicating a high confidence level that the site is malicious. The combination of low trust scoring, vendor flags, and blocklist presence reinforces the elevated risk assessment.

Defenders should treat claimpump.live as hostile infrastructure and add it to local blocklists or DNS filtering policies. Monitoring for connections to the associated IP address and the Cloudflare name servers can help surface additional malicious domains that may share the same edge network. Incident response teams should also examine any credential‑harvesting or cryptocurrency payment pages presented under the Google branding, and consider broader outreach to users who may be targeted by this impersonation vector.