cloud-homepage[.]wixstudio[.]com

PhishDestroy identifies cloud-homepage.wixstudio.com as an active crypto drainer scam impersonating a cloud homepage service. The domain leverages WixStudio’s platform to host a malicious page designed to deceive users into connecting crypto wallets under the guise of a legitimate cloud service offering. Threat actors have embedded a drainer kit—likely a modified or off-the-shelf script—to siphon cryptocurrency assets upon wallet connection. This campaign exhibits clear intent to exploit user trust in cloud service interfaces to facilitate unauthorized fund transfers.

This domain was flagged with a VirusTotal detection score of 4/95, indicating no antivirus engines currently flag it as malicious despite its active status. The domain is registered through Wix.com, with the IP address resolving to 34.144.206.118, hosted on Google Cloud Platform infrastructure. The SSL certificate was issued by Let’s Encrypt, adding a false veneer of legitimacy. Creation date and Google Safe Browsing (GSB) status remain unverified in public records, and as of this report, the domain has not been blocked by major threat intelligence blocklists. These factors contribute to a heightened risk profile, as the domain evades traditional detection mechanisms while remaining operationally active.

As of the latest investigation, cloud-homepage.wixstudio.com remains active and continues to serve the malicious content. PhishDestroy has flagged this domain under seed b5d57d for immediate verification by users. Immediate action includes blocking the domain at the network and endpoint levels, and users are strongly advised to verify any URLs referencing cloud-homepage.wixstudio.com or similar cloud service impersonations before interacting. Despite low detection rates, the risk of financial loss remains high due to the presence of a confirmed crypto drainer. Users should exercise extreme caution and rely on verified threat intelligence platforms like PhishDestroy to prevent unauthorized access to digital assets.