pumpsawp[.]wixstudio[.]com

This investigation documents the activity observed for pumpsawp.wixstudio.com as of 29 July 2026. The domain was created on 17 December 2016 and is registered through the Wix Studio platform, indicating the use of a legitimate web‑hosting provider for the underlying infrastructure. Authoritative name‑server records list dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net and dns4.p08.nsone.net, all belonging to the NSONE service.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, confirming that at least one external threat‑intelligence feed has identified it as malicious. VirusTotal reports that five of ninety‑one scanned security vendors flag the domain, providing additional independent corroboration of its suspicious nature. The threat classification is recorded as generic phishing with an elevated risk rating and an active status, suggesting ongoing use in credential‑harvesting campaigns.

Current public evidence does not disclose the hosting IP address, SSL certificate details, HTTP response codes, or any observed page title, limiting the depth of infrastructure analysis. Defenders should therefore prioritize ingestion of the domain into deny‑list controls, monitor DNS queries for the listed NSONE name servers, and consider broader network‑level blocking of traffic to the host. Continuous re‑evaluation is advised, as additional detection sources may surface further indicators of compromise.