sumupcreditunion[.]com

This domain, sumupcreditunion.com, was registered on July 30 2025 through NameCheap, Inc. and currently resolves to the IPv4 address 172.245.14.131 hosted by AS36352 (HostPapa) in the United States. The site is presently taken offline, but its infrastructure remains observable. An SSL certificate identified as type R11 is present, indicating a standard TLS layer without extended validation. The page title returned from the HTTP response is “Welcome to | Sumup Credit Union,” which does not disclose any additional content. The campaign is classified as a tech‑support scam that impersonates Google, a brand‑targeted impersonation technique.

The domain appears on a single security blocklist and is specifically listed by PhishDestroy. VirusTotal analysis shows three of ninety‑five scanning engines flagging the domain, reinforcing its malicious reputation. The Gridinsoft trust score is 0 / 100, the lowest possible rating, reflecting extreme distrust. Evidence gaps include the lack of publicly available Safe Browsing or OTX entries, and no detailed payload or phishing page screenshots have been released. Consequently, the exact user‑interaction flow and any credential‑harvesting mechanisms remain unknown.

Defenders should add 172.245.14.131 to network‑level deny lists, block DNS queries for sumupcreditunion.com, and ensure that any outbound connections to the host are rejected. The domain should be entered into internal phishing blocklists and shared with threat‑intel platforms. Continuous monitoring of the registrar NameCheap for new domains using similar naming patterns is recommended, as well as periodic re‑scans of the IP address for potential re‑activation. Organizations should also educate users about unsolicited tech‑support calls that reference Google, reinforcing the policy that legitimate Google support never initiates contact via unsolicited phone calls.