en-us-desktoplive[.]wixstudio[.]com

PhishDestroy identifies en-us-desktoplive.wixstudio.com as an active crypto drainer scam impersonating a legitimate service. The domain leverages a fraudulent WixStudio-hosted page to trick users into authorizing malicious cryptocurrency transactions under the guise of a 'live desktop' update or tool. This threat specifically targets wallet connections and token approvals, with the end goal of draining funds under unauthorized permissions.

This domain was flagged with 4/95 detections on VirusTotal as of current scans, operates via IP 34.144.206.118, and uses a Let's Encrypt SSL certificate to appear legitimate. Registration details show it was recently created and remains unlisted on major blocklists like Google Safe Browsing, PhishTank, or OpenPhish at this time, with no recorded trust scores due to its new status. Technical indicators include a WixStudio subdomain structure commonly abused for impersonation, dynamic IP hosting likely tied to cloud infrastructure, and HTTPS encryption to reduce user suspicion.

Given the high risk of irreversible financial loss from crypto drainer activity, users must immediately avoid interacting with this domain. If you’ve already connected a wallet or approved any transactions, revoke all suspicious token approvals via your wallet’s interface (e.g., Etherscan’s Token Approval Check) and transfer remaining assets to a secure wallet. Report the domain to your antivirus provider and crypto wallet support teams, and consider using hardware wallets with transaction simulation for future interactions.