started-io-apps[.]wixstudio[.]com

PhishDestroy identifies the domain started-io-apps.wixstudio.com (seed 0a294b) as an active cryptocurrency drainer mimicking an authentication or wallet-connect gateway. Infrastructure is hosted on Wix (wixstudio.com) but redirects users to a malicious script that drains funds without notice. No specific brand is impersonated at present; the site presents itself as a generic “started-io” application, likely targeting early adopters or open-source tool users seeking quick onboarding. The page relies on a fake login or wallet signature prompt to trigger the drainer kit. This domain resolves to IPv4 34.144.206.118 and currently holds a clean VirusTotal score of 4/95 detections after one day of submission. The SSL certificate is issued by Let’s Encrypt, ensuring HTTPS lulls visitors into a false sense of security. Registrar details are obscured via Wix’s privacy proxy, and the creation date remains undetermined due to registry masking. Google Safe Browsing (GSB) flagged it once with a blocklist count of 1 at 2024-05-29T12:00:00Z, indicating minimal but active distribution. The site remains live and is actively serving the drainer script to unprotected traffic. PhishDestroy has added it to the blocklist with a high-priority flag; however, due to the low VT and GSB counts, the remaining risk is elevated for users who bypass DNS filtering. Users should verify any links through PhishDestroy before interacting and avoid entering wallet credentials or signing transactions on this domain.