us-cryptto[.]wixstudio[.]com

The domain us-cryptto.wixstudio.com was created on 17 December 2016 and is registered through the Wix Studio platform. Analysis of public threat intelligence shows that four of ninety‑one antivirus and URL‑reputation engines on VirusTotal currently flag the domain as malicious, indicating a consensus that it is being used for fraudulent activity. The site is listed on a single external blocklist and is actively blocked by the PhishDestroy filtering service, reinforcing the classification as a phishing‑related resource. The threat type assigned by the reporting system is generic phishing, and the risk level is elevated, reflecting the potential for credential harvesting or other user‑targeted deception.

The domain remains active as of the report date, 29 July 2026. Available evidence confirms the presence of malicious indicators, but several infrastructure details remain unavailable. No IP address, autonomous system number, or hosting location has been disclosed in the current intelligence set, preventing a full mapping of the underlying server environment. Likewise, SSL certificate details, HTTP response codes, and page title content have not been published, leaving the exact surface‑level behavior of the site uncharacterized.

Because the domain is hosted on a Wix‑controlled sub‑domain, traditional takedown pathways may involve the Wix abuse contact, but the lack of explicit hosting data complicates direct remediation. Defenders should prioritize blocking the domain at the network perimeter and ensuring that endpoint security solutions incorporate the four vendor detections reported by VirusTotal. Security teams should also add the domain to internal URL blocklists and monitor the single external blocklist for any changes in classification. Continuous re‑evaluation is recommended, as additional infrastructure details may emerge that could inform takedown requests or broader attribution efforts.