connect-suites-apps[.]wixstudio[.]com

PhishDestroy identifies connect-suites-apps.wixstudio.com as an active brand impersonation site hosting a malicious crypto drainer under the guise of a ‘connect suite’ portal. The domain masquerades as a legitimate integration hub to trick users into approving malicious wallet transactions or surrendering credentials. Recent SSL issuance via Let’s Encrypt combined with hosting on AS396982 (Google Cloud) suggests operational evasion tactics, while the absence of current blocklist coverage underscores the need for proactive detection. Domain analysis reveals minimal age—likely registered within the last 30 days—combined with zero VirusTotal detections as of seed 296985, enabling continued malicious activity. The true registrar remains obscured behind Wix privacy services, complicating takedown and attribution. Despite claims of ‘suite connectivity,’ the site contains obfuscated JavaScript payloads designed to intercept browser wallet extensions and prompt fraudulent transaction approvals. Users who accessed this domain should immediately revoke any wallet approvals, clear browser caches, and scan for unauthorized crypto transfers. Block the IP 34.144.206.118 at the network level and update security tools with this IOC. Report the site to Google Safe Browsing and your wallet provider to prevent future fund loss.