# ssocoinbasepro.wixstudio.com — MALICIOUS

> ssocoinbasepro.wixstudio.com is a crypto drainer phishing site impersonating Coinbase. Flagged by 13 of 95 VirusTotal vendors, avoid this domain and verify on.

## Summary
PhishDestroy identifies the active phishing domain ssocoinbasepro.wixstudio.com (seed 20c239) as a high-risk crypto drainer impersonating the Coinbase brand. The threat involves fraudulent login pages designed to steal cryptocurrency wallet credentials and initiate unauthorized transfers. This campaign is currently active and leverages brand impersonation to deceive users into entering sensitive financial information.


This domain is flagged by 13 of 95 VirusTotal security vendors and appears on two independent blocklists. It resolves to IP address 34.144.206.118 and is served via a Let's Encrypt SSL certificate. The malicious site operates under the Wix Studio platform at wixstudio.com, a legitimate website builder that has been abused to host the phishing content. The domain does not return a public creation date in WHOIS records, suggesting recent registration to avoid detection. Blocked by MetaMask and SEAL security extensions, this site poses an immediate risk to users interacting with cryptocurrency platforms.


Users are advised not to access ssocoinbasepro.wixstudio.com under any circumstances. This domain demonstrates clear intent to deceive and steal digital assets through fake Coinbase-themed crypto drainer pages. PhishDestroy recommends immediate blocking at the network and endpoint level. Always verify URLs through official sources or trusted threat intelligence platforms before entering credentials or wallet addresses. Report any interaction with this domain to PhishDestroy for further analysis and inclusion in threat feeds.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: Coinbase

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 34.144.206.118

## Detection Status
- VirusTotal: 13 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/13f9d3a5-4e54-471e-95d7-d2f88640fbde
- PhishDestroy: https://phishdestroy.io/domain/ssocoinbasepro.wixstudio.com/
- LLM endpoint: https://phishdestroy.io/domain/ssocoinbasepro.wixstudio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ssocoinbasepro.wixstudio.com/
Last updated: 2026-04-14