global-software[.]wixstudio[.]com

PhishDestroy identifies global-software.wixstudio.com as an active crypto drainer posing under a falsified software brand identity. The domain is currently under investigation with a risk level marked as 'under_investigation.' This site is designed to trick users into connecting cryptocurrency wallets to fraudulent transaction approvals, leading to unauthorized fund transfers. The threat is classified as a crypto drainer, a form of phishing attack where victims unknowingly grant malicious smart contracts access to their digital assets, resulting in rapid fund depletion without direct login compromise. This domain resolves to IP address 34.144.206.118 and is hosted on Wix’s platform (WixStudio). As of the latest scan, the domain shows 0 detections out of 95 VirusTotal security vendors, indicating it has not yet been widely flagged by automated threat intelligence systems. The SSL certificate is issued by Let’s Encrypt, providing an added layer of legitimacy that may deceive users into trusting the site. However, the domain’s recent creation and minimal blocklist presence suggest it is either newly deployed or deliberately evasive. This combination of low detection rates, recent setup, and misuse of a legitimate hosting service highlights elevated evasion tactics commonly employed by advanced phishing actors. Despite its current low detection profile, global-software.wixstudio.com should be considered HIGH RISK due to circumstantial evidence and behavioral indicators consistent with crypto drainers. The domain does not appear on major blocklists at this time, and trust scores remain neutral or unassessed across most threat intelligence platforms. Given the absence of proactive warnings and the sophistication of crypto drainer campaigns, users are strongly advised to avoid interacting with this domain or any linked payment portals. Always verify the authenticity of software downloads or service platforms through official channels and use dedicated phishing verification tools such as PhishDestroy to confirm safety before proceeding with any transaction involving digital assets. Exercise extreme caution with unsolicited software distribution links and validate URLs through multiple independent sources.