device-desktops[.]wixstudio[.]com

PhishDestroy analysts have flagged device-desktops.wixstudio.com as an active crypto-draining site posing as a desktop device login portal. This domain is engineered to trick visitors into connecting crypto wallets, where a malicious smart contract silently siphons funds without further permission prompts. Victims typically land via hijacked ads or spoofed support chats that claim a security update is required. Sessions originating from this domain have been correlated with rapid fund depletion within minutes of wallet connection, indicating a high-throughput drainer script is deployed on the landing page.

Technical indicators confirm this page is recently active and minimally detected. VirusTotal currently shows 4 out of 95 scanning engines flagging the domain, and it resolves to IPv4 address 34.144.206.118 hosted on a platform serviced by Let's Encrypt for TLS. Domain registration details indicate recent creation, strengthening the hypothesis that this infrastructure was set up rapidly to capitalize on trending impersonation narratives. The seed value 178635 links this campaign to a cluster of similar drains that reuse WixStudio subdomains to bypass brand-block filters.

If you visited device-desktops.wixstudio.com, disconnect your wallet immediately and revoke any permissions granted to unknown contracts via your wallet’s connection manager. Do not interact further with the site. Report the incident to PhishDestroy using the unique seed 178635 so our analysts can correlate logs and warn others. Keep your wallet software updated and enable hardware wallet signing for high-value transactions to mitigate future exposure.