homepage-bridgo[.]wixstudio[.]com

PhishDestroy identifies homepage-bridgo.wixstudio.com as an active crypto drainer scam domain leveraging a spoofed WixStudio platform page to deceive cryptocurrency users. The domain employs a generic phishing threat vector focused on unauthorized wallet drain operations, targeting victims through social engineering and brand impersonation. No specific drainer kit payloads were detected during sandbox analysis, suggesting reliance on user interaction to trigger malicious JavaScript or wallet connection prompts.

This domain was flagged by PhishDestroy with the seed identifier 045b23 and exhibits the following technical indicators: a Let's Encrypt SSL certificate, resolution to IP address 34.144.206.118, and zero detections on VirusTotal (3/95 engines) as of the latest scan. The domain is hosted on the WixStudio platform and resolves through a Google Cloud IP range. Registrar and creation date remain unverified due to domain privacy masking, and this domain has not been added to Google Safe Browsing (GSB) blocklists or any major threat intelligence feeds at this time. Current blocklist presence indicates minimal prior reporting, increasing the risk of undetected exposure.

The domain remains active with a status of 'under_investigation' and poses a persistent threat to cryptocurrency users. PhishDestroy recommends immediate network-level blocking of IP 34.144.206.118 and domain homepage-bridgo.wixstudio.com. Users are advised to avoid clicking links, visiting the site, or interacting with any wallet connection prompts. Organizations should update firewall rules, email filtering policies, and endpoint detection signatures to include this domain and IP. Remaining risk is assessed as high due to the active status and low detection coverage, warranting enhanced monitoring and user awareness campaigns.