iostart-homebpage[.]wixstudio[.]com

PhishDestroy has flagged iostart-homebpage.wixstudio.com as the distributor of a crypto drainer phishing campaign. This malicious site mimics legitimate crypto platforms to trick users into connecting their digital wallets, allowing the threat actor to silently drain funds once authorization is granted. The attackers disguise the fraudulent page behind a WixStudio subdomain, leveraging the platform’s trusted branding to appear credible to unsuspecting visitors. This domain was flagged after analysis revealed zero detections from 95 security engines on VirusTotal, highlighting how evasive the threat remains despite clear malicious intent. The site resolves to IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate to further appear legitimate. Its infrastructure suggests recent deployment, with the payload designed to target users interacting with cryptocurrency services, posing a high risk to asset safety. If you visited iostart-homebpage.wixstudio.com, immediately disconnect your wallet from any connected platforms and do not approve any pending transaction requests. Run a malware scan using reputable antivirus software such as Malwarebytes or Windows Defender. Report the domain to your wallet provider and consider revoking any unnecessary permissions granted to unknown domains. Stay alert: crypto drainers often exploit urgency and social engineering to bypass security awareness.