bridges-nav[.]wixstudio[.]com

PhishDestroy identifies bridges-nav.wixstudio.com as an active crypto drainer impersonating Bridges, a legitimate financial platform. The domain leverages WixStudio hosting to create a convincing fake login page that silently drains connected crypto wallets once credentials or wallet signatures are provided. Attackers register similar-looking domains to exploit user trust and harvest private keys or seed phrases, enabling direct transfers to attacker-controlled addresses without requiring traditional two-factor authentication. This technique, known as a crypto drainer, is increasingly common in web3 phishing campaigns due to its high success rate and irreversible financial impact.

Technical analysis reveals this domain remains undetected by 95 security engines on VirusTotal (5/95 detections as of latest scan), operates under a legitimate SSL certificate issued by Let’s Encrypt, and resolves to IP 34.144.206.118 via Google Cloud infrastructure. The domain was recently registered and is currently unlisted on major threat intelligence blocklists, indicating a newly launched, rapidly evolving threat with low detection coverage. This combination of fresh registration, low detection, and legitimate infrastructure makes it particularly dangerous to unsuspecting users.

If you visited bridges-nav.wixstudio.com or entered any credentials, wallet address, or approved a transaction, your funds may be at risk. PhishDestroy urges users to immediately revoke any wallet connections via tools like Revoke.cash or Etherscan’s Token Approval Checker, transfer remaining assets to a new wallet, and reset all associated passwords. Enable hardware wallet signing and disable auto-approval of transactions to mitigate further exposure. Report the domain to PhishDestroy and your wallet provider to aid in takedown efforts and protect the broader community.