comnetcoins[.]wixstudio[.]com

PhishDestroy identifies comnetcoins.wixstudio.com as an active crypto drainer phishing campaign targeting cryptocurrency users. This domain is currently under investigation and remains unflagged despite active abuse. The site mimics legitimate ComNetCoins branding to trick users into connecting wallets and draining funds. Intelligence shows the domain resolves to IP 34.144.206.118, operates over HTTPS with a Let’s Encrypt SSL certificate, and has not yet been detected by 3/95 VirusTotal scanners. This combination of low detection and active operation poses a high risk to cryptocurrency investors engaging with branded financial services. This domain exhibits multiple red flags consistent with recent crypto drainer campaigns. It leverages the WixStudio platform to host content under a subdomain, reducing infrastructure visibility. The SSL certificate (Let’s Encrypt) provides a false sense of security, as encrypted phishing sites are increasingly common. The IP 34.144.206.118 resolves to a cloud-hosted server on Google Cloud, which is frequently abused for short-lived phishing operations. While the creation date, registrar, and blocklist status are not disclosed in this dataset, the absence of VirusTotal detections (3/95) suggests the domain is either new or employs evasion techniques. Trust scores from domain reputation tools remain unavailable, indicating low maturity in third-party analysis. Immediate mitigation is required to prevent financial loss. Users must avoid clicking links to comnetcoins.wixstudio.com or any related subdomains. Verify all ComNetCoins communications by accessing the official website directly via a trusted bookmark or search engine. Use PhishDestroy to validate domains before entering credentials or connecting cryptocurrency wallets. If interaction has already occurred, revoke any wallet connections immediately using your wallet provider’s security settings. Report the domain to PhishDestroy for takedown and share with cryptocurrency community watchdogs to increase collective defense. Monitor wallet transactions for unauthorized transfers and enable multi-factor authentication where possible.