browser-base-apps[.]wixstudio[.]com

PhishDestroy identifies browser-base-apps.wixstudio.com as an active crypto drainer impersonating legitimate browser-based applications. This domain leverages deceptive branding to trick users into connecting cryptocurrency wallets or inputting seed phrases under the guise of downloading or updating software. The threat actor likely uses social engineering tactics—such as fake ads, spoofed support pages, or compromised legitimate websites—to redirect traffic to this fraudulent Wix-hosted page. Once users engage, the site may execute malicious JavaScript to drain connected wallets via clipboard hijacking, phishing forms, or hidden iframe overlays that intercept wallet connections. Security researchers have observed similar campaigns targeting crypto users with domains hosted on reputable platforms like Wix to bypass traditional web filtering solutions. This domain was flagged by PhishDestroy with a current status of active and under investigation. It resolves to IP 34.144.206.118 and uses a valid SSL certificate issued by Let’s Encrypt, which may help it evade basic browser warnings. VirusTotal currently shows 0 detections out of 95 security engines, indicating low detection coverage despite clear malicious intent. The domain was created recently and is hosted on Wix’s Studio platform, a common choice for phishing operators due to its ease of setup and legitimate appearance. While the registrar information is not provided, the use of Wix infrastructure suggests a preference for abusing trusted hosting environments to host malicious content. The lack of detections highlights the importance of proactive threat intelligence over reactive scanning. If you have visited browser-base-apps.wixstudio.com, disconnect any cryptocurrency wallets immediately and revoke any unauthorized connections through your wallet’s interface. Do not enter any seed phrases, private keys, or wallet passwords on this site. Clear your browser cache and consider running a full antivirus scan. Report the domain to your browser’s safe browsing program and to PhishDestroy using the unique seed b0e56e. Avoid clicking on any links or ads that lead to this domain, and warn others in your network who may have been targeted by similar crypto drainer campaigns. Always verify software sources directly from official websites and use hardware wallets or multi-factor authentication for crypto transactions.