opendesktop[.]wixstudio[.]com

PhishDestroy identifies opendesktop.wixstudio.com as a live crypto drainer posing as OpenDesktop to trick users into connecting crypto wallets and approve malicious transactions. This Wix-hosted subdomain hosts a fraudulent interface engineered to mimic the legitimate OpenDesktop platform, tricking visitors into authorizing cryptocurrency transfers via wallet connection prompts. The domain uses a valid Let’s Encrypt SSL certificate to appear trustworthy, but its recent configuration and low detection profile suggest it is actively used in wallet-draining campaigns targeting unsuspecting users seeking open-source software and desktop customization resources. This domain was flagged by PhishDestroy with a current threat status of active and risk level under investigation. VirusTotal analysis shows zero detections out of 95 engines as of the latest scan, indicating it remains undetected by most antivirus systems. The domain resolves to IP 34.144.206.118, hosted on Google Cloud via Wix’s infrastructure. Domain registration details show recent creation, with no long-term history, and it is not currently listed on major blocklists, contributing to its stealth profile. Despite using a legitimate SSL certificate, behavioral analysis reveals patterns consistent with crypto-draining infrastructure, including deceptive UI elements and wallet connection prompts designed to harvest private keys or approve malicious token transfers. If you have visited opendesktop.wixstudio.com, immediately disconnect from the internet and check all connected crypto wallets for unauthorized transactions or pending approvals. Do not interact with any wallet prompts or download files from the site. Revoke any suspicious approvals via blockchain explorers or wallet interfaces as soon as possible. Report the URL to PhishDestroy for further analysis and consider running a full system scan. Users are advised to verify website authenticity by checking official domains (opendesktop.org) and to avoid entering private keys or seed phrases anywhere outside trusted, offline environments. Always enable hardware wallet signing and multi-factor authentication on crypto wallets to mitigate drainer risks.