io-etorro[.]wixstudio[.]com

The domain io-etorro.wixstudio.com is identified as a phishing resource specifically targeting users of the eToro trading platform. Analysis indicates the domain hosts a cloned interface designed to harvest login credentials, financial details, and personal information under false pretenses. As of the latest assessment, the domain is currently offline, though prior activity warrants continued monitoring. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on December 17, 2016, and resolves to the IP address 34.144.206.118. Detection metrics show the domain was flagged by 8 of 95 security vendors on VirusTotal, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on three distinct security blocklists, including PhishDestroy and PhishingArmy, and employs a Let’s Encrypt SSL certificate to lend superficial legitimacy. The prolonged registration period suggests potential long-term abuse or dormant reactivation risks. Current status confirms the domain has been taken offline, though historical indicators remain relevant for threat correlation. Organizations and individuals are advised to block the domain and associated IP across all security layers, including email gateways, web filters, and endpoint protection systems. Users who interacted with the domain should immediately reset credentials for eToro and any other financial services accessed during the exposure window. Continuous monitoring for related infrastructure, such as subdomains or newly registered lookalike domains, is strongly recommended.