apps-crptocom-logon[.]wixstudio[.]com

Analysis conducted on July 29, 2026, identifies the domain apps-crptocom-logon.wixstudio.com as an active cryptocurrency credential phishing site. The domain was registered through Wix Studio on June 8, 2026, and remains operational as of the report date. Infrastructure analysis reveals the domain is hosted on Wix's platform, though specific IP addresses and autonomous system details are not disclosed in available intelligence. Detection metrics indicate elevated risk: the domain appears on one security blocklist and is flagged by 9 of 91 security vendors on VirusTotal, confirming its classification as malicious by multiple independent sources.

The domain's naming convention—incorporating 'crptocom' and 'logon'—strongly suggests an intent to mimic a cryptocurrency exchange login portal, though the exact brand being impersonated is not confirmed in available data. No page title or additional content analysis is provided in the intelligence, limiting further assessment of the phishing kit or user interface. The domain's creation date aligns with recent phishing trends targeting cryptocurrency users, a pattern observed in mid-2026 campaigns. Defenders are advised to treat this domain as a confirmed phishing threat.

Immediate action includes blocking the domain at the DNS and web gateway levels, updating endpoint protection signatures, and alerting users to avoid interaction. Security teams should monitor for related domains registered through Wix Studio or similar platforms, as threat actors frequently reuse hosting providers for phishing infrastructure. Given the domain's active status and detection by multiple vendors, incident responders should prioritize reviewing logs for connections to apps-crptocom-logon.wixstudio.com, particularly from networks with cryptocurrency-related activity.