value-livedesktop[.]wixstudio[.]com

PhishDestroy identifies value-livedesktop.wixstudio.com as an active crypto drainer phishing domain currently under investigation for malicious intent. The threat type is categorized as generic phishing with a risk level marked as under_investigation. This domain employs a deceptive WixStudio subdomain structure to impersonate legitimate services, aiming to trick users into connecting crypto wallets or submitting sensitive credentials. The site resolves to IP 34.144.206.118, which is hosted on Google Cloud infrastructure, a common choice for short-lived malicious campaigns due to its anonymity and scalability. This domain exhibits several red flags across multiple threat intelligence sources. VirusTotal currently reports 4 out of 95 security vendors detecting it, indicating it has not yet been widely blacklisted despite its malicious activity. The domain uses a Let's Encrypt SSL certificate, a tactic often exploited by phishing operators to appear legitimate. Creation and registration details are masked or recently altered, as typical with disposable phishing infrastructure. The IP address 34.144.206.118 has no established reputation and is associated with cloud hosting, which is frequently abused for malicious purposes. No entries were found on major blocklists at the time of analysis, highlighting the importance of proactive monitoring and user vigilance. Users are strongly advised to avoid interacting with value-livedesktop.wixstudio.com, especially if prompted for wallet connections or login credentials. Crypto drainer phishing sites like this one often employ fake transaction prompts or fake login pages to siphon funds directly from connected wallets. If you have already visited this domain, disconnect your wallet immediately, revoke any suspicious permissions, and scan your device for malware. PhishDestroy recommends verifying any suspicious domain on its platform before entering sensitive information. To protect yourself, always use hardware wallets, enable transaction confirmations, and double-check URLs for misspellings or unusual subdomains. Report this domain to PhishDestroy to help block it for others.