bridge-home[.]wixstudio[.]com

PhishDestroy identifies active crypto drainer campaign linked to bridge-home.wixstudio.com. The domain remains under investigation but is currently active and unresolved. The infrastructure leverages WixStudio for hosting, suggesting low-cost impersonation of legitimate Bridge protocol services.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating no current signature-based detection. The domain resolves to IP 34.144.206.118, which is associated with Google Cloud infrastructure, and utilizes a Let’s Encrypt SSL certificate for HTTPS traffic. The domain uses the WixStudio platform, a legitimate website builder, to host malicious content, likely to evade domain-based detection and appear trustworthy. Further technical indicators and historical data are being analyzed to determine registrar, creation date, and blocklist inclusion status.

Current status remains active with no known takedown. This campaign poses a high risk to cryptocurrency users, particularly those interacting with DeFi protocols such as Bridge. The domain employs HTTPS to mislead users into trusting the connection. Recommendations include blocking the domain at the network perimeter, inspecting outbound traffic for connections to 34.144.206.118, and educating users to verify URLs using official Bridge protocol channels. Continuous monitoring via threat intelligence platforms is advised due to the low detection rate and active status.