desktop-enldger[.]wixstudio[.]com

PhishDestroy identifies desktop-enldger.wixstudio.com as a generic phishing domain currently under investigation for cryptocurrency drainer activity. The domain is hosted on WixStudio and employs a deceptive naming strategy ('enldger') likely intended to mimic legitimate cryptocurrency-related services. No specific drainer kit has been publicly disclosed, but the domain's behavior aligns with known crypto-draining tactics, including the use of social engineering to trick users into connecting crypto wallets or revealing private keys. The domain resolves to IP address 34.144.206.118 and is secured with a Let's Encrypt SSL certificate, which may contribute to a false sense of legitimacy. VirusTotal currently shows 4/95 detections, indicating that no security vendors have flagged it yet. The domain was registered under a privacy-protected registrar, and its creation date remains undisclosed in public records as of this assessment. Google Safe Browsing (GSB) does not currently list the domain, and it does not appear on major blocklists such as PhishTank or OpenPhish at this time. This domain remains active and poses an ongoing threat to users, particularly those involved in cryptocurrency transactions. PhishDestroy has flagged the domain for further investigation, but it has not yet been widely blacklisted. Users are strongly advised to avoid interacting with desktop-enldger.wixstudio.com and to verify any suspicious crypto-related domains on PhishDestroy before taking any action involving financial assets. The risk level is classified as under_investigation, but caution is warranted due to the potential for financial loss.