us-intro-desktop[.]wixstudio[.]com

PhishDestroy identifies us-intro-desktop.wixstudio.com as an active crypto drainer phishing domain currently under investigation. The site mimics legitimate WixStudio interfaces to trick users into connecting crypto wallets or entering seed phrases, exposing them to direct fund theft. No brand name is explicitly impersonated beyond the Wix hosting platform, but the payload aligns with crypto-draining malware families.

This domain resolves to IP 34.144.206.118 and is flagged by 4 of 95 VirusTotal vendors as of the latest scan. It holds a valid Let's Encrypt SSL certificate, which may be used to lend false legitimacy to deceptive content. The domain appears to be recently created and hosted on Wix’s infrastructure, which can be exploited to bypass traditional domain-based blocklists. Trust and reputation scores are currently neutral to low due to the lack of historical data and absence of vendor detections, indicating a newly deployed threat vector.

While the immediate risk level remains under investigation, the absence of VirusTotal detections suggests this threat is either very new or employs sophisticated evasion techniques. Users should avoid accessing this domain, especially via links in unsolicited messages or social media posts. If you have already interacted with this site, disconnect your wallet immediately, revoke any unauthorized permissions, and transfer remaining funds to a clean wallet. Report the domain to your antivirus provider and relevant crypto platforms to aid in takedown efforts. Monitor wallet activity closely for suspicious transactions.