apps-moonpay[.]wixstudio[.]com

This domain, apps-moonpay.wixstudio.com, is flagged as a fraudulent cryptocurrency login portal designed to impersonate MoonPay, a legitimate digital asset payment service. The site presents a fake login interface under the page title 'Log In MoonPay | Sign In to Your Account®®®,' attempting to deceive users into entering sensitive credentials. Analysis indicates the site may also function as a crypto drainer, potentially siphoning funds from connected wallets if users authorize transactions or input private keys. The threat targets individuals familiar with cryptocurrency platforms, exploiting trust in the MoonPay brand to facilitate unauthorized access to accounts or assets. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC and resolves to the IP address 34.144.206.118, hosted on Google Cloud infrastructure. The site employs a Let's Encrypt SSL certificate, which while providing encryption, does not validate legitimacy. VirusTotal reports 6 out of 95 security vendors flagging the domain as malicious, and it appears on five independent security blocklists, including MetaMask and PhishingArmy. Detected technologies include Wix, React, Lodash, and Google Cloud CDN, with HTTP/3 and HSTS implemented, suggesting an attempt to mimic modern, secure web practices while concealing malicious intent. The domain has since been taken offline, but similar threats may persist under different addresses. Users who visited apps-moonpay.wixstudio.com or entered credentials should immediately revoke any connected wallet authorizations and transfer assets to a new, secure wallet. Reset passwords for any accounts where the same credentials were reused, and enable multi-factor authentication where available. Monitor financial and cryptocurrency accounts for unauthorized transactions. If a wallet was connected, assume private keys or seed phrases may be compromised. Report the incident to relevant platforms and consider filing a report with local cybercrime authorities. Future vigilance is advised when interacting with cryptocurrency-related login portals, particularly those not accessed through official channels.