oldpugetsound[.]com

Analysis of the domain oldpugetsound.com indicates active phishing infrastructure with a high-risk classification. Registered through NAMECHEAP INC on July 24, 2008, the domain remains operational as of July 21, 2026, resolving to the IP address 158.94.209.40. Infrastructure analysis reveals the use of Namecheap hosting nameservers (dns1.namecheaphosting.com and dns2.namecheaphosting.com), a common pattern in phishing campaigns leveraging shared hosting environments. Six of 91 security vendors on VirusTotal have flagged this domain, though the specific detection rules or signatures triggering these alerts are not disclosed in available intelligence. The domain appears on at least one security blocklist, as confirmed by PhishDestroy, further supporting its malicious classification.

No specific brand impersonation or scam category is identified in the provided data, and the exact content of the site remains unanalyzed. The domain's longevity—registered nearly 18 years ago—does not align with typical phishing domain lifecycles, which often involve short-lived, disposable domains. This anomaly may suggest either a repurposed legitimate domain or an attempt to evade detection by leveraging an aged domain with established trust metrics. However, the current detection and blocklist status override any potential historical legitimacy.

Defenders should treat this domain as hostile infrastructure. Recommended actions include blocking the domain and its resolving IP (158.94.209.40) at the network perimeter, updating endpoint protection rules to flag any connections to oldpugetsound.com, and monitoring for internal systems attempting to access this domain. If internal access is detected, investigate for potential credential harvesting or malware delivery. Given the domain's active status and high-risk classification, immediate containment measures are warranted even in the absence of confirmed brand impersonation or specific scam details.