new-started[.]zapier[.]app

The domain new-started.zapier.app, which was taken down, impersonated Zapier to conduct phishing attacks. It was flagged as malicious by 13 out of 91 VirusTotal vendors. This high detection rate underscores the threat's severity before it was neutralized. The domain was hosted on an Amazon IP, indicating a robust infrastructure possibly leveraged for credibility.

Registered with Name.com, Inc., the domain utilized Let's Encrypt for its SSL certificate, a common choice for phishing sites due to its free and automated issuance. The operation was detected by PhishDestroy on June 19, 2026, and swiftly added to public blocklists, highlighting the effectiveness of early detection systems in mitigating such threats.

Despite being offline now, the domain's high platform risk score of 88/100 suggests it was designed to deceive users effectively. The use of a familiar brand like Zapier likely aimed to exploit user trust, increasing the likelihood of successful credential theft or malware distribution. This case exemplifies the ongoing challenge of phishing sites exploiting brand recognition to lure unsuspecting users.

PhishDestroy's proactive detection capabilities play a crucial role in identifying threats during the critical window before antivirus databases update. This approach helps in curbing the impact of phishing domains like new-started.zapier.app, ensuring that they are neutralized before causing widespread harm.