live-enstartted[.]wixstudio[.]com

PhishDestroy identifies the active crypto drainer campaign hosted at the domain live-enstartted.wixstudio.com, currently under investigation with a high-risk designation. This site masquerades as a legitimate service to deceive users into connecting crypto wallets and authorizing fraudulent transactions. The threat remains active, with no detections recorded on VirusTotal as of the latest scan, underscoring the need for immediate user caution. This domain resolves to IP 34.144.206.118 and employs a Let's Encrypt SSL certificate for perceived legitimacy. As of the investigation seed dc0306, VirusTotal shows 0 detections out of 95 vendors, indicating evasion of automated detection mechanisms. The domain is registered under the Wix platform (wixstudio.com), complicating traditional takedown efforts due to the use of legitimate hosting infrastructure. Creation date and additional blocklist metrics are pending further OSINT correlation, but the absence of detections highlights the stealthy nature of this campaign. Users are strongly advised to avoid interacting with this domain or any linked content. Verify unfamiliar URLs using PhishDestroy's real-time scanning tools before taking action. Report this domain immediately to your organization's security team or via PhishDestroy's submission portal to aid in global threat intelligence sharing. Exercise heightened scrutiny for unsolicited links promising crypto rewards or urgent wallet actions.