trustwebapps[.]wixstudio[.]com

The domain trustwebapps.wixstudio.com has been flagged for hosting a generic phishing campaign linked to a cryptocurrency drainer kit. This infrastructure is designed to mimic legitimate web applications, tricking users into connecting their crypto wallets under false pretenses. The threat leverages deceptive branding, often impersonating well-known services, to harvest private keys or authorize malicious transactions. Initial static analysis reveals no active payload at this stage, but the domain’s structure suggests an imminent evolution toward wallet-draining operations.

PhishDestroy’s forensic scan confirms this domain resolves to IP 34.144.206.118 and operates under a Let’s Encrypt SSL certificate. As of the latest VirusTotal assessment, it remains undetected by 95 security engines (0/95), with no blocklist entries recorded yet. The domain is registered through Wix.com, created recently with hosting on Google Cloud Platform (34.144.206.118). Its low detection ratio and clean reputation on public scanners indicate this is an emerging threat still under the radar of major security vendors.

This domain is currently active and under investigation. PhishDestroy analysts are monitoring its propagation vectors, including social media and phishing emails, while collaborating with hosting providers for takedowns. The risk level is classified as 'under_investigation' due to dynamic threat behavior, though early indicators suggest a high potential for financial harm. Users are strongly advised to avoid interaction and report any encounters to PhishDestroy for further verification.