io-pumpsawp-apps[.]wixstudio[.]com

The domain io-pumpsawp-apps.wixstudio.com is currently active and classified as a generic phishing site with an elevated risk rating. Infrastructure analysis shows the domain is hosted on Wix Studio’s platform, as indicated by the registrar information. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, which are typical of Wix‑managed hosting.

The domain was created on December 17, 2016, suggesting a long‑standing presence that may have been repurposed for malicious use. VirusTotal scans have recorded detections from five out of ninety‑one security vendors, providing independent confirmation that the site contains content or behavior matching known phishing signatures. Additionally, the domain appears on one external security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the assessment of malicious intent.

While the available data does not include SSL certificate details, HTTP response codes, or page‑title content, the combination of registrar provenance, name‑server configuration, vendor detections, and blocklist inclusion forms a consistent evidence set pointing to an active phishing operation. Defenders should add the domain to network and endpoint blocklists, monitor DNS queries for the listed name servers, and enforce URL filtering policies that deny traffic to this host. Continuous re‑scanning via multi‑vendor services is advised to capture any changes in payload or hosting that could affect detection confidence.