strted-cryptocem[.]wixstudio[.]com

Analysis of strted-cryptocem.wixstudio.com indicates active use in a crypto‑focused phishing operation. The domain was first registered on December 17, 2016 through the Wix Studio platform, and it continues to resolve using the nsone.net name server set dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. Independent scanning on VirusTotal shows that three of ninety‑one AV engines have flagged the domain as malicious, confirming a modest detection rate.

The domain is also listed on a public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, providing additional corroboration of its abusive nature. No publicly available information on the hosting IP address, SSL certificate details, HTTP response codes, or page title has been disclosed, so those facets remain unverified at this time. Given the limited but consistent evidence—registration via a free‑site builder, presence on multiple threat‑intelligence feeds, and detection by a subset of AV scanners—defenders should treat the domain as hostile.

Recommended actions include adding the fully qualified domain to network and web‑filter blocklists, monitoring DNS query logs for any lookups to the listed nameservers, and updating endpoint protection signatures to reflect the current VirusTotal detections. Continuous re‑evaluation is advised, as further infrastructure details may emerge if the site is accessed or if additional telemetry becomes available.