test-desktop[.]wixstudio[.]com

PhishDestroy identifies test-desktop.wixstudio.com as an active crypto drainer impersonating Wix Studio services. The domain is currently unflagged on VirusTotal, with 0 detections out of 95 engines, and resolves to IP 34.144.206.118. Its SSL certificate is issued by Let's Encrypt, suggesting an attempt to appear legitimate while evading detection. This domain was flagged for investigation due to the absence of detections despite its active status. The infrastructure behind it, including the IP address 34.144.206.118, has not been widely blacklisted, and no historical data indicates prior abuse reports. The lack of detections on VirusTotal and reliance on a Let's Encrypt certificate highlight a potential gap in threat intelligence coverage for this specific payload. To mitigate risks associated with crypto drainers, users should avoid interacting with this domain entirely. Verify any unexpected Wix Studio-related communications through official channels. Network defenders should consider blocking the IP 34.144.206.118 and monitoring for related artifacts. Given the lack of current detections, proactive hunting for similar domains leveraging Wix's infrastructure is recommended.