enjoy-desktop[.]wixstudio[.]com

PhishDestroy identifies enjoy-desktop.wixstudio.com as an active cryptocurrency drainer scam hosted on Wix’s platform. The domain leverages Wix’s Studio service to impersonate legitimate desktop software, tricking victims into connecting crypto wallets under the guise of a software download or update. No specific brand or drainer kit variant was publicly disclosed in open-source intelligence at the time of analysis, but the setup aligns with common crypto-draining campaigns that prompt wallet connections and initiate unauthorized transfers. This domain resolves to IP 34.144.206.118 and is currently served over an SSL certificate issued by Let’s Encrypt. It was detected by PhishingArmy and OISD blocklists and remains unflagged on VirusTotal with a 4/95 detection score as of the latest scan. The domain is registered under Wix’s infrastructure, indicating a likely abuse of the Wix platform’s free hosting tier. Although the exact creation date wasn’t publicly available, the domain has already been flagged on multiple security blocklists, demonstrating rapid propagation across threat feeds. Despite being blocked by two major blocklists, enjoy-desktop.wixstudio.com remains active as of the investigation with no takedown observed. Users are advised not to interact with this domain or any linked pages. Security teams should block the domain at the network level and alert users to avoid wallet connection prompts from unverified sources. The low VirusTotal score highlights a detection gap that may persist until more signatures are developed, underscoring the need for proactive threat hunting based on behavior rather than reputation alone.