appblockfy[.]wixstudio[.]com

PhishDestroy identifies appblockfy.wixstudio.com as a generic phishing domain actively impersonating BlockFi, a major cryptocurrency lending platform. This site is classified as a crypto drainer kit designed to trick users into connecting wallets or entering credentials, enabling direct theft of digital assets. The domain operates under a WixStudio subdomain, a tactic frequently abused for quick-launch phishing pages due to low barriers to entry and legitimate hosting infrastructure.

Technical indicators confirm this threat is live and under investigation. The domain resolves to IP address 34.144.206.118 and is secured with a Let's Encrypt SSL certificate, increasing its deceptive appearance. As of the latest scan, VirusTotal shows 0 detections out of 95 engines, indicating evasion of signature-based detection. The domain is registered through an unlisted registrar (likely privacy-protected), and Google Safe Browsing (GSB) status remains unflagged. Given the absence of detections and active status, this site continues to pose a significant risk to cryptocurrency users.

The current status of appblockfy.wixstudio.com is active and ongoing. Immediate response actions include flagging the domain at the network and browser levels, updating blocklists, and notifying BlockFi’s threat intelligence team. While the risk level is currently marked as under_investigation, the lack of detection and active operation suggest a high potential for user compromise. Security teams are advised to block the domain and IP, warn users, and monitor for associated wallet addresses or drainer scripts. Remaining risk is elevated due to the domain’s active hosting and use of a trusted SSL certificate.