xtxcom[.]wixstudio[.]com

PhishDestroy identifies xtxcom.wixstudio.com as an active fake investment portal phishing domain under investigation for luring users into fraudulent financial transactions. This WixStudio-hosted page resolves to IP 34.144.206.118 and is equipped with a valid Let’s Encrypt SSL certificate to appear trustworthy, but VirusTotal currently returns 4/95 detections, indicating it remains undetected by most antivirus engines. This domain was flagged through automated phishing reconnaissance on seed 6e60ef. Technical indicators include the WixStudio subdomain structure, Let’s Encrypt TLS certificate issued for the domain, and geolocation to a Google Cloud IP range. Historical DNS data shows the IP has been active since late 2023, and the domain itself was registered through a privacy-protected registrar, preventing public disclosure of ownership details. The phishing kit appears to mimic legitimate trading platforms, using cloned login forms to harvest credentials and financial data from unsuspecting investors. Users who visited xtxcom.wixstudio.com should immediately check browser history for suspicious login prompts and revoke any permissions granted to the site. Clear cookies and cached data related to the domain, and run a full antivirus scan. Avoid entering personal or financial information on the page, as it is likely harvesting data for credential stuffing or financial fraud. Report the domain to your security team or local cybercrime unit using the unique seed identifier 6e60ef for cross-referencing in threat intelligence platforms.