us-io-gatee[.]wixstudio[.]com

PhishDestroy identifies us-io-gatee.wixstudio.com as an active crypto-draining scam site deployed on the Wix Studio platform. The domain leverages a generic phishing kit designed to impersonate an IO-Gate service, tricking users into connecting crypto wallets and signing malicious payloads. No specific brand or drainer kit signature has been extracted yet; however, the presence of a drainer payload is inferred from behavioral telemetry and payload analysis. Given the site’s structure and hosting environment, it is likely operated by a financially motivated actor targeting cryptocurrency users with high-value phishing lures.

This domain resolves to IP 34.144.206.118 and is SSL-certified via Let’s Encrypt. As of the latest scan, VirusTotal reports 0 detections out of 95 engines, indicating evasion against current signatures. The domain was created recently and continues to operate with a clean reputation across major blocklists, showing zero current listings. Registrar details point to Wix.com’s hosting infrastructure, which has been abused to host short-lived scam pages. Google Safe Browsing (GSB) has not yet flagged the domain, and WHOIS data remains privacy-protected, hindering attribution.

As of present, the domain remains ACTIVE and under investigation with medium confidence in the threat assessment. Immediate response actions include domain takedown via Wix abuse channels and IP de-listing via cloud provider requests. Users are strongly advised to avoid interaction, report the domain to security vendors, and inspect wallet connection attempts for suspicious payloads. Residual risk persists due to unpatched abuse vectors within the hosting environment and delayed detection signatures. Continuous monitoring is required to prevent further victimization and refine threat intelligence around this campaign.