screen-desktop[.]wixstudio[.]com

PhishDestroy identifies screen-desktop.wixstudio.com as an active crypto-draining phishing site masquerading as a legitimate login page. This domain is designed to trick users into connecting their cryptocurrency wallets under the false pretense of authentication or transaction verification. Once connected, the site executes unauthorized blockchain transactions to drain funds without the victim’s explicit consent. The threat is currently classified as active and under investigation, meaning it remains operational and is likely targeting users in ongoing campaigns.

This domain was flagged by PhishDestroy with the following technical indicators: it resolves to IP address 34.144.206.118 and uses a Let’s Encrypt SSL certificate for HTTPS traffic. As of the latest scan, VirusTotal detected 6 out of 95 security engines flagging this domain, indicating it has not yet been widely blacklisted. The site is hosted on WixStudio, a legitimate website builder, which has been abused to host malicious content. While the exact creation date is not specified, the domain’s use of a free hosting platform and absence of prior detections suggest a recently deployed threat.

If you have visited screen-desktop.wixstudio.com, immediately disconnect your cryptocurrency wallet from any active sessions or browser extensions. Do not approve any unexpected blockchain transactions or sign unknown messages. Scan your device for malware using reputable security software and revoke any unauthorized connections via your wallet’s dApp browser or settings. Report the domain to PhishDestroy and your wallet provider to help block further attacks. Avoid interacting with this site and warn others who may be targeted. Always verify URLs and use trusted sources for login pages.