homes-velodrome[.]wixstudio[.]com

PhishDestroy identifies homes-velodrome.wixstudio.com as a recently active crypto drainer phishing campaign hosted on WixStudio’s platform. The threat actor leverages a deceptive subdomain mimicking a legitimate entity, using Let’s Encrypt SSL for false legitimacy and operating from a Google Cloud IP (34.144.206.118). Based on behavioral analysis, this domain is designed to trick cryptocurrency users into connecting wallets or entering seed phrases under the guise of participation in a ‘velodrome’-branded financial incentive program. The campaign is currently under investigation but shows signs of active deployment and low detection coverage. VirusTotal analysis confirms zero detections out of 95 security engines as of the latest scan, indicating the domain has not yet been widely blacklisted. WHOIS data indicates registration via a privacy-protected registrar, obscuring true ownership, and the domain was created recently, suggesting opportunistic deployment. The infrastructure, including the Let’s Encrypt certificate and Google Cloud IP, is consistent with tactics used by crypto drainer operators to evade early detection and maintain operational agility. The absence of network-level blocks highlights the need for proactive monitoring by users and security teams. If you visited homes-velodrome.wixstudio.com, immediately disconnect any connected wallets from dApps or websites and revoke any suspicious permissions via reputable blockchain explorers or wallet settings. Do not enter credentials, seed phrases, or private keys anywhere on this domain. Scan your system with updated antivirus and consider rotating wallet addresses linked to this session. Report the domain to PhishDestroy and relevant authorities immediately. Monitor transaction history for unauthorized transfers, especially outgoing transactions to unknown addresses. Always verify third-party web links via official channels before interaction, especially those promoting financial rewards or urgent actions.