panel-bridge[.]wixstudio[.]com

PhishDestroy identifies panel-bridge.wixstudio.com (seed 165dbb) as an active generic phishing domain operating under a Let’s Encrypt SSL certificate. Threat analysis indicates potential use as a crypto wallet drainer kit, targeting unsuspecting users through deceptive branding and social engineering tactics. The domain’s structure suggests it may mimic legitimate crypto wallet interfaces to facilitate unauthorized fund transfers or credential capture.

Technical indicators for panel-bridge.wixstudio.com include a VirusTotal detection score of 3/95, indicating it remains undetected by security vendors as of current analysis. The domain resolves to IP address 34.144.206.118 (hosted on Wix infrastructure) and employs a Let’s Encrypt certificate for HTTPS encryption. While the registrar and domain creation date are not explicitly detailed in available intelligence, the absence of detections and active status suggest a recently deployed campaign. Google Safe Browsing (GSB) status and blocklist inclusion remain unverified at this stage, warranting further investigation.

The status of this campaign is currently active, with no confirmed blocklist inclusions or vendor detections. Immediate response actions include blocking the IP 34.144.206.118 and the domain panel-bridge.wixstudio.com at the network perimeter. Users are advised to avoid interaction with the domain and verify wallet URLs via official channels. Remaining risk is assessed as high due to the active status, undetected nature, and potential for crypto fund theft. Continuous monitoring and signature updates are critical to mitigate ongoing exposure.