started-pumpswp[.]wixstudio[.]com

The domain started-pumpswp.wixstudio.com has been identified as a threat for credential theft. This domain was likely part of a phishing operation targeting users to extract sensitive information under the guise of legitimate interactions. The website was built using a platform that incorporates technologies such as Wix, React, Google Cloud services, and others, suggesting that the operators leveraged popular infrastructure to lend credibility to their malicious activities.

A detailed technical analysis reveals that this domain has been flagged by 7 out of 95 security vendors on VirusTotal, indicating a consensus among a fraction of the cybersecurity community that it posed a threat. The domain was registered through a well-known registrar, GoDaddy.com, LLC, and it resolves to the IP address 34.144.206.118. Notably, the domain was allegedly created on an anomalous future date, June 12, 2026, which could indicate fraudulent registration practices or data entry errors. It is also listed on three security blocklists: PhishDestroy, PhishingArmy, and OISD, further corroborating its malicious intent.

Currently, the domain status is offline, having been deactivated following its identification as a threat. This action effectively mitigates the immediate risk posed by this domain; however, users should remain vigilant for similar threats. The presence of this domain on multiple blocklists underscores the importance of employing comprehensive security measures, such as regular updates to blocklists and employing robust endpoint protection solutions to defend against credential theft and other phishing-related threats. Users are advised to exercise caution with emails or links claiming to be from this domain or related entities.