pump-sale[.]live

The domain pump-sale.live is a generic phishing site designed to deceive users into disclosing sensitive information or performing actions that benefit threat actors. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, pump-sale.live has been taken offline, reducing immediate risk to potential victims.

Technical indicators confirm pump-sale.live as a low-detection but active threat. Only 2 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist (PhishDestroy) and was registered through Web Commerce Communications Limited on February 21, 2026. It resolved to the IP address 104.21.46.14, hosted by Cloudflare (AS13335) in the US, and used an SSL certificate issued by Google Trust Services / WE1. The observed page title was 'Welcome to nginx!', and the site employed Cloudflare and HTTP/3 technologies. Nameservers were lewis.ns.cloudflare.com and raquel.ns.cloudflare.com.

Users who interacted with pump-sale.live should assume their credentials or other sensitive data may have been compromised. Change passwords for any accounts accessed after visiting the site, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader threat mitigation. If financial or cryptocurrency transactions were involved, contact the relevant institution immediately to secure accounts.