learn-home[.]wixstudio[.]com

PhishDestroy identifies learn-home.wixstudio.com as a crypto drainer domain currently active and under investigation. This platform-hosted site (Wix Studio) is designed to impersonate financial education portals with the intent of harvesting cryptocurrency wallet credentials or draining assets via malicious smart contract interactions. No specific drainer kit attribution is available at this time, but the domain’s behavior aligns with classic crypto-draining campaigns targeting users seeking financial learning resources.

Technical indicators for this domain include a VirusTotal detection score of 0/95, indicating no antivirus or security vendor has flagged it despite its malicious purpose. The domain resolves to IP address 34.144.206.118, which is associated with Google Cloud infrastructure, a common hosting provider for malicious sites due to its anonymity and ease of deployment. The domain was registered recently (date not specified), but its use of a Let’s Encrypt SSL certificate suggests an attempt to appear legitimate. Google Safe Browsing (GSB) status remains unconfirmed, and no current blocklist entries are recorded, reinforcing the need for proactive detection measures.

The current status of learn-home.wixstudio.com is active and classified as a high-risk crypto drainer under investigation. PhishDestroy has flagged this domain with unique seed identifier 5b3c63 to track its evolution and spread across networks. Immediate actions include blocking the domain at DNS and network levels and updating firewall rules to drop traffic to 34.144.206.118. Organisations should alert users to avoid this domain entirely and verify any financial education-related links through PhishDestroy’s validation tools. Remaining risk is moderate due to the domain’s low detection rate and use of trusted infrastructure, but user vigilance and proactive blocking can mitigate potential compromise.