minswapextension[.]wixstudio[.]com

PhishDestroy identifies minswapextension.wixstudio.com as a live domain actively hosting a crypto drainer designed to impersonate MiniSwap, a legitimate decentralized exchange. This domain is currently flagged as active and remains under investigation as a potential threat vector for cryptocurrency theft. Users interacting with this domain risk having their digital assets drained through malicious smart contract interactions or fake transaction prompts.

This domain was flagged by 5 of 95 VirusTotal vendors, indicating it has not yet been widely detected despite its active status. It resolves to IP address 34.144.206.118 and operates under Wix’s hosting infrastructure via wixstudio.com. The domain is currently unblocked on major security platforms, and its SSL certificate is issued by Let's Encrypt, which does not inherently indicate malicious intent but is commonly abused in such campaigns. Additionally, VirusTotal’s lack of detections suggests this threat may be newly deployed or employing evasion techniques.

Given the active status and undetected nature of this domain, organizations and individual users should block minswapextension.wixstudio.com at the network and endpoint levels immediately. Exercise heightened caution when encountering links or advertisements referencing MiniSwap, especially those hosted on third-party domains or shortened URLs. Monitor wallet transaction alerts and consider revoking any suspicious token approvals to mitigate potential financial loss. Further, report this domain to threat intelligence platforms and security vendors to increase collective detection coverage.