get-suiteappx[.]wixstudio[.]com

PhishDestroy identifies the domain get-suiteappx.wixstudio.com as an active crypto drainer campaign impersonating SuiteApp software, designed to surreptitiously drain cryptocurrency wallets during fraudulent software downloads. The threat actor leverages a legitimate Wix Studio subdomain to host a spoofed SuiteApp installer page that prompts users to connect wallets under the guise of software activation, after which malicious JavaScript silently exfiltrates private keys and initiates unauthorized transfers. Behavioral telemetry indicates the domain is currently resolving to IP 34.144.206.118 and is served over a Let's Encrypt SSL certificate to appear legitimate. This domain was flagged by PhishDestroy with unique seed d0c84c; VirusTotal currently reports zero detections out of 95 engines, indicating evasion of automated detection systems. The domain was registered via Wix and is actively hosted on Google Cloud infrastructure. As of the latest scan, the domain remains unlisted on major blocklists, increasing the risk of successful user compromise. The low detection rate combined with the spoofed software theme suggests a targeted, likely automated campaign aimed at cryptocurrency users seeking productivity tools. If you visited get-suiteappx.wixstudio.com, immediately revoke any wallet connections, transfer remaining funds to a new wallet, and scan your device for malware. Do not reconnect to the domain. Report the incident to PhishDestroy for takedown and use wallet recovery tools if necessary. Avoid downloading software from untrusted domains and verify sources via official channels before any installation.