io-coin-tracker[.]wixstudio[.]com

Analysis of the domain io-coin-tracker.wixstudio.com indicates it is actively engaged in cryptocurrency-related phishing operations as of July 29, 2026. The domain, registered through Wix Studio on December 17, 2016, resolves to the IP address 34.144.206.118 and utilizes nameservers dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. Detection data from VirusTotal reveals that 15 out of 91 security vendors flag this domain as malicious, corroborating its classification as a phishing threat. The domain is also listed on one security blocklist, specifically PhishDestroy, further supporting its elevated risk status.

Infrastructure analysis reveals the domain is hosted on Wix Studio’s platform, which is frequently leveraged for both legitimate and malicious purposes due to its accessibility and ease of use. The IP address 34.144.206.118 is associated with cloud-based hosting, a common characteristic of phishing infrastructure that allows threat actors to rapidly deploy and scale malicious sites. While the exact content of the site has not been analyzed, the domain name suggests a focus on cryptocurrency tracking or wallet-related deception, a tactic often employed to harvest credentials or private keys from victims. Defenders should treat this domain as an active threat.

Network-level blocking of the domain and its resolving IP address is recommended to prevent user exposure. Security teams are advised to monitor for any connections to io-coin-tracker.wixstudio.com within their environments and investigate potential compromises linked to this infrastructure. Given the domain’s presence on multiple detection platforms and its inclusion on a security blocklist, organizations should prioritize this domain in their threat mitigation strategies. Additional analysis of the site’s content and associated campaigns may provide further insights into its targeting methods and victimology.