eng-live-desktop[.]wixstudio[.]com

PhishDestroy identifies eng-live-desktop.wixstudio.com as an active crypto drainer site masquerading as a legitimate Live Desktop portal. Its goal is to trick visitors into connecting cryptocurrency wallets or entering seed phrases so attackers can silently drain funds. The domain uses a WixStudio subdomain (wixstudio.com) to appear professional, yet it has no affiliation with any legitimate desktop service provider. At the time of analysis, the site resolved to IP 34.144.206.118 and served an SSL certificate issued by Let’s Encrypt, likely to reassure visitors that “https” means safety. Despite these deceptive touches, VirusTotal currently shows zero detections across 95 scanning engines, indicating that mainstream security tools have not yet blacklisted the domain. This domain was flagged on seed 1d0987 and added to the PhishDestroy database for further investigation. Technical indicators reveal a recent creation date and hosting within a Google Cloud infrastructure range commonly abused for short-lived phishing campaigns. The registrar is Cloudflare, Inc., which is not inherently malicious but is frequently chosen by threat actors for its privacy protections and fast domain provisioning. The site’s landing page mimics a generic authentication or wallet-connect interface, tricking users into signing malicious transactions that authorize fund transfers without additional prompts. Even though the SSL certificate appears valid, it does not guarantee the site’s legitimacy—certificate issuance is automated and does not involve human review of content. If you visited eng-live-desktop.wixstudio.com, immediately disconnect your wallet or revoke any connected permissions via your wallet’s “Connected Apps” or “Authorized Sites” settings. Do not interact further with the page, and clear your browser cache and cookies for that domain. Report the incident to your wallet provider and consider transferring remaining assets to a new wallet with a different seed phrase. Always verify domains by checking PhishDestroy or other reputable threat-intel platforms before entering sensitive information or connecting crypto wallets. If you entered a seed phrase or private key, revoke wallet access immediately and generate a new wallet with a fresh recovery phrase.