startin-liveloggn[.]wixstudio[.]com

PhishDestroy identifies startin-liveloggn.wixstudio.com as an active crypto drainer scam site currently under investigation.

This domain resolves to IP 34.144.206.118 and is hosted on Wix’s platform using a Let’s Encrypt SSL certificate. Notably, it remains undetected by 0 of 95 VirusTotal vendors as of the latest scan, indicating a low immediate signature-based detection rate. The domain is a subdomain under wixstudio.com, leveraging the trusted Wix infrastructure to appear legitimate while distributing malicious payloads targeting cryptocurrency users. Given its active status and the absence of detections, this site poses a high risk to users who may unknowingly interact with it.

The domain’s infrastructure includes a single IP address (34.144.206.118) hosted by Google Cloud, with no additional known infrastructure linked at this time. The use of a Let’s Encrypt certificate further enhances its deceptive appearance, as modern browsers display the padlock icon without warning. As this domain is actively distributing a crypto drainer—malware designed to siphon cryptocurrency from victims’ wallets—its risk level is classified as high. The lack of detections suggests that signature-based defenses are currently ineffective, emphasizing the need for behavioral and heuristic analysis to identify such threats.

As of this assessment, startin-liveloggn.wixstudio.com remains active and unblocked. Users are strongly advised to avoid visiting this domain or interacting with any links associated with it. To mitigate risk, cryptocurrency users should verify website authenticity through official channels, use hardware wallets for transactions, and enable multi-factor authentication on all wallet and exchange accounts. Security teams should block this domain at the network level and report it to relevant threat intelligence platforms to improve detection coverage. Continuous monitoring is recommended due to the evolving nature of crypto drainer campaigns.