en-us-appstart[.]wixstudio[.]com

PhishDestroy identifies en-us-appstart.wixstudio.com as an active Apple ID phishing portal under investigation for credential theft. The domain is currently flagged on one major security blocklist and remains undetected by VirusTotal with 0 detections out of 95 scanners as of seed 8ef2a2. The site resolves to IP address 34.144.206.118, operates under a valid Let’s Encrypt SSL certificate, and is blocked by OpenPhish, indicating immediate malicious intent despite low antivirus coverage.

This domain was flagged with risk level under_investigation but presents a high-risk phishing threat targeting Apple ID credentials. The infrastructure data shows it is hosted on a WixStudio subdomain, resolving to a Google Cloud IP (34.144.206.118), secured via Let’s Encrypt certificate, and specifically blacklisted by OpenPhish for phishing activity. All available telemetry supports classification as a phishing site with no legitimate use detected.

To mitigate exposure to this Apple ID phishing portal, users must avoid visiting en-us-appstart.wixstudio.com entirely. If accidentally accessed, never enter Apple ID, password, or any personal information. Immediately report the domain to Apple via reportphishing@apple.com and clear browser cache/cookies. Organizations should block the domain and IP 34.144.206.118 at DNS and network levels using updated threat intelligence feeds. Users on affected devices should run a full antivirus scan using tools like Malwarebytes or Windows Defender with cloud protection enabled.