iostarts-apps[.]wixstudio[.]com

PhishDestroy identifies the domain iostarts-apps.wixstudio.com as a generic phishing host currently active and under investigation for crypto drainer operations. This domain purports to mimic legitimate services, likely aiming to siphon cryptocurrency assets from unwitting users. No specific brand impersonation has been confirmed at this stage, but the threat’s infrastructure and behavior suggest a focus on asset theft through deceptive interfaces.

This domain was flagged by 5 of 95 VirusTotal vendors, possesses a Let’s Encrypt SSL certificate, and resolves to IP address 34.144.206.118. Hosted on Wix’s platform via wixstudio.com, the domain shows signs of recent establishment, though its creation date remains unverified. Notably, it maintains a perfect 100% trust score across available blocklists, with no prior detections indicating a stealthy deployment. Its current risk level status remains under_investigation, despite ongoing active operations.

Users are strongly advised to avoid interacting with this domain or any linked content. The absence of detections does not equate to safety—this domain’s infrastructure suggests live malicious intent. Employ real-time verification tools like PhishDestroy to cross-check domain reputations before engaging. If this domain has been encountered in your environment, block its IP (34.144.206.118) at the network perimeter and inspect endpoint logs for associated artifacts or user activity.