myssouphldappcdn[.]wixstudio[.]com

PhishDestroy identifies myssouphldappcdn.wixstudio.com as a confirmed brand impersonation scam site currently active and under investigation for malicious intent. This domain is being operated under the guise of a legitimate service, likely targeting cryptocurrency users with a crypto drainer payload. The domain is currently unresolved for direct phishing pages but exhibits strong indicators of fraudulent activity, warranting immediate caution for visitors.

This domain was flagged with 0 detections out of 95 VirusTotal vendors at the time of analysis, indicating a highly evasive threat actor leveraging new infrastructure. The domain resolves to IP address 34.144.206.118 and is hosted on Wix’s WixStudio platform, a legitimate service that has been abused for malicious hosting. The domain exhibits no active blocklist presence as of current scans, suggesting it may be newly registered or recently activated. The SSL certificate is issued by Let’s Encrypt, a trusted provider, which increases the domain’s apparent legitimacy to potential victims. Trust scores and historical data remain limited due to the domain’s recent registration status and low detection rate.

The threat actor behind myssouphldappcdn.wixstudio.com is currently active and deploying a crypto drainer disguised as a legitimate application or service, specifically targeting cryptocurrency users. Visitors to this domain are at high risk of credential theft or asset drain if the site hosts JavaScript-based drainers or prompts wallet connections. Given the low detection rate and high potential for harm, it is strongly recommended to block this domain at the network perimeter using DNS filtering or endpoint protection tools. Users are advised to avoid accessing this domain entirely and report any suspicious interactions to their security teams. Further, organizations should integrate this indicator into threat intelligence feeds and monitor for related infrastructure to prevent follow-on attacks.