appstat-connect[.]wixstudio[.]com

PhishDestroy identifies a newly active phishing domain hosted on WixStudio under the impersonation of AppStat's official portal. The domain appstat-connect.wixstudio.com leverages a legitimate hosting provider (WixStudio) to lend false credibility while delivering a sophisticated credential-harvesting scheme. Current intelligence confirms the threat is classified as generic_phishing and remains under investigation by cybersecurity researchers due to its novel evasion tactics and low detection rate. Users accessing this domain risk exposing sensitive login credentials and personal data to threat actors operating this fraudulent service.

This domain was flagged by 10 of 95 VirusTotal vendors as of the latest scan, indicating a significant detection gap exploited by adversaries. The domain resolves to IP address 34.144.206.118, which is associated with cloud-based hosting infrastructure commonly abused by phishing campaigns. The SSL certificate, issued by Let’s Encrypt, provides a false sense of security, as it only validates the domain’s technical legitimacy—not its malicious intent. No additional blocklist counts or trust scores are currently available, reinforcing the need for heightened scrutiny when encountering this domain.

The threat remains active and poses a credible risk to users expecting to access AppStat’s legitimate platform. PhishDestroy recommends immediate blacklisting of this domain in organizational and personal security tools. Users who may have interacted with this site should reset credentials used on the platform, enable multi-factor authentication where available, and monitor accounts for unauthorized access. Security teams are advised to inspect network traffic for connections to IP 34.144.206.118 and report findings to threat intelligence platforms to aid in early detection and mitigation. Exercise extreme caution when receiving links or QR codes referencing appstat-connect.wixstudio.com; report promptly to your security provider or through PhishDestroy’s submission portal.