ssocoinbasspro[.]wixstudio[.]com

PhishDestroy identifies ssocoinbasspro.wixstudio.com as a live phishing domain impersonating a cryptocurrency wallet service, posing as a legitimate platform to harvest user credentials and digital assets. The threat is currently active and leveraging a spoofed interface to deceive visitors into submitting sensitive information. MetaMask and SEAL have already blocked access to this infrastructure, indicating early recognition of its malicious intent.

This domain was flagged by 8 of 95 VirusTotal vendors upon analysis, suggesting it remains undetected by most antivirus engines despite its malicious activity. The domain resolves to IP address 34.144.206.118, secured with a Let’s Encrypt SSL certificate, and is hosted on Wix’s studio platform. It has been observed on 2 separate security blocklists, raising immediate concern about its legitimacy and operational safety. Additional telemetry confirms the domain’s recent creation, though the exact date was not provided in available datasets.

The current status of ssocoinbasspro.wixstudio.com remains active, with confirmed blocking by MetaMask and SEAL indicating proactive defense measures. Users are strongly advised to avoid interacting with this domain, refrain from entering any personal or financial information, and report any suspicious encounters to their security teams. Security teams should block this domain at the network level using the provided IP (34.144.206.118) and domain name, and monitor for related infrastructure. Given the low detection rate on VirusTotal and the use of a legitimate hosting provider (Wix), this threat exemplifies the evolving sophistication of phishing campaigns targeting cryptocurrency users.