applivedesktop[.]wixstudio[.]com

PhishDestroy identifies applivedesktop.wixstudio.com as an active crypto drainer impersonating Apple’s Live Desktop service, hosted on Wix’s platform. This domain uses Wix’s subdomain structure to appear legitimate while attempting to trick users into connecting cryptocurrency wallets under the guise of remote desktop functionality. The site resolves to IP 34.144.206.118 and leverages a Let’s Encrypt SSL certificate to enhance credibility, a common tactic among fraudulent sites to bypass browser security warnings. Initial threat assessment flags this as a high-risk crypto drainer due to its impersonation of a major tech brand and the absence of detections on VirusTotal, which currently shows 0/95 engines flagging the domain. This domain was flagged during routine threat intelligence monitoring on seed d535c2. The infrastructure is hosted via Wix’s studio subdomain service, which has been increasingly abused by threat actors to host phishing and crypto drainer campaigns. Wix’s legitimate services often lack granular controls for malicious subdomain creation, making it easier for attackers to deploy fraudulent pages quickly. The SSL certificate issued by Let’s Encrypt further obfuscates the site’s malicious intent, as encrypted connections are often associated with secure, trustworthy services. Technical indicators such as the IP 34.144.206.118 and the Let’s Encrypt certificate align with patterns observed in other crypto drainer campaigns targeting Apple users under similar impersonation tactics. If you visited applivedesktop.wixstudio.com, disconnect your cryptocurrency wallet immediately and revoke any unauthorized connections. Do not enter seed phrases, private keys, or wallet credentials on this site. Check your wallet’s transaction history for unauthorized transfers and consider transferring remaining funds to a secure wallet. Report the domain to your antivirus provider, browser vendor, and relevant platforms (e.g., Wix, Apple) to aid in takedown efforts. Enable wallet protection features such as transaction approvals and use hardware wallets where possible to mitigate future risks. Monitor your accounts closely for signs of compromise and consider rotating keys if suspicious activity is detected.