iotrzsrt[.]wixstudio[.]com

PhishDestroy identifies iotrzsrt.wixstudio.com as an active Walmart gift card scam impersonating a promotional offer to harvest credentials and payment data. The page mimics Walmart’s branding and lures victims with a fake $1000 gift card raffle, requiring users to complete a survey before revealing credit-card entry fields. No known drainer kit was detected on the site; instead, the threat relies on social engineering and spoofed Walmart assets delivered via Wix’s subdomain hosting. iotrzsrt.wixstudio.com resolves to IPv4 34.144.206.118 and was first observed on 2024-05-28. VirusTotal scanning returns 2/95 detections as of 2024-06-05, indicating evasion against current signatures. The domain is registered through Wix.com, Inc., and carries a Google Safe Browsing (GSB) status of “unverified.” It has not yet appeared on public blocklists, underscoring its novelty and the need for rapid takedown before wider abuse. As of 2024-06-05, the campaign remains active and is being actively monitored by PhishDestroy. Wix’s security team has been notified via their abuse channel; however, no takedown confirmation has been received. Users should avoid clicking links in unsolicited emails or social posts referencing “Walmart gift card surveys.” Bookmark legitimate walmart.com URLs and verify any promotions directly on the official site. Remaining risk is high due to low detection rates and the absence from blocklists, warranting heightened user vigilance.