platformbridge[.]wixstudio[.]com

PhishDestroy identifies platformbridge.wixstudio.com as a crypto drainer impersonating a payment processing platform to siphon cryptocurrency from unsuspecting users. This Wix-hosted subdomain leverages a legitimate-looking interface to trick victims into connecting their crypto wallets under the guise of verifying transactions or processing deposits. Once a wallet is connected, the drainer silently approves malicious token approvals or initiates transfers to attacker-controlled addresses, resulting in irreversible asset loss. Threat actors often abuse free website builders like Wix to rapidly deploy phishing infrastructure while minimizing hosting costs, making this a low-overhead but high-impact attack vector. This domain was flagged with a VirusTotal detection rate of 1/95 at the time of analysis, indicating it has not yet been widely recognized by security vendors. Resolving to IP 34.144.206.118, the site uses a valid Let's Encrypt SSL certificate to appear trustworthy. While the exact creation date and registrar details are not yet available in public records, the absence of detections suggests this campaign is either newly active or carefully crafted to evade initial detection. The lack of blocklist entries further implies this is a fresh or targeted operation rather than a widespread spam blast. Users who visited platformbridge.wixstudio.com and connected a crypto wallet should immediately revoke any unauthorized token approvals via their wallet’s interface (e.g., Etherscan’s Token Approval Checker) and transfer remaining assets to a new wallet. Do not interact with any further prompts or transactions from this domain. Report the incident to your wallet provider and consider filing a complaint with platforms like Chainalysis or local cybercrime units to aid in tracking. Always verify URLs via official channels and use hardware wallets for high-value transactions to mitigate drainer risks.