engpublic[.]wixstudio[.]com

PhishDestroy identifies engpublic.wixstudio.com as a recently active domain involved in crypto drainer operations, designed to trick visitors into connecting cryptocurrency wallets and approve malicious transactions. The site mimics legitimate platforms to deceive users into signing malicious blockchain transactions that drain funds. While the domain itself is hosted on WixStudio and leverages a Let’s Encrypt SSL certificate for perceived legitimacy, its infrastructure (IP 34.144.206.118) raises immediate red flags for unauthorized financial extraction activities.

This domain was flagged by PhishDestroy due to its involvement in crypto drainer campaigns, with current VirusTotal detections at 2 out of 95 security engines—indicating it has evaded most antivirus and threat intelligence detection systems as of the latest scan. The domain's recent creation and use of a free certificate service like Let’s Encrypt highlights its attempt to appear benign while concealing its malicious intent. WixStudio domains are typically used for legitimate web development, making this specific subdomain (engpublic) an abuse of the platform to host phishing infrastructure undetected.

If you visited engpublic.wixstudio.com, do not connect any cryptocurrency wallets, approve any transaction requests, or enter private keys. Disconnect from the site immediately and revoke any wallet connections through your wallet provider’s security settings. Run a malware scan on your device, clear browser cache and cookies, and monitor your wallet transactions for unauthorized activity. Report the domain to your wallet provider and relevant crypto platforms if you interacted with it. Avoid visiting or engaging with this domain until further notice.