home-livepage[.]wixstudio[.]com

PhishDestroy has initiated an active investigation into home-livepage.wixstudio.com, a domain currently engaged in cryptocurrency wallet drainer operations. This WixStudio-hosted page mimics legitimate live streaming or content hosting platforms to deceive victims into connecting their digital wallets. The threat actor leverages social engineering tactics, often via impersonation of well-known streamers or content creators, to trick users into authorizing malicious transactions. No specific drainer kit or brand impersonation has been identified at this stage, but the infrastructure closely resembles known wallet-draining campaigns observed in Q2 2024. This domain resolves to IP address 34.144.206.118 and is secured with a Let's Encrypt SSL certificate, likely to enhance trust perception. VirusTotal currently reports 0 detections out of 95 scanners, indicating low detection coverage. The domain was registered through an unlisted registrar and remains unflagged by Google Safe Browsing (GSB). As of this report, it is not listed on any major blocklists, including PhishTank or OpenPhish. Creation date and additional WHOIS details are under analysis to determine attribution or patterns with prior campaigns. The threat remains active and under continuous monitoring by PhishDestroy. Immediate response actions include DNS sinkholing and browser warning propagation where feasible. However, due to the low detection rate and unlisted status, the risk of victimization remains elevated. Users are strongly advised to avoid interacting with this domain, verify sender identities through official channels, and use hardware wallets or transaction simulation tools before approving crypto transfers. Remaining risk is classified as high pending further takedown actions or detection engine updates.