official-suites-eng[.]wixstudio[.]com

PhishDestroy identifies a newly active crypto drainer hosted at official-suites-eng.wixstudio.com, currently under investigation but confirmed malicious. The site impersonates a login portal to siphon cryptocurrency from unsuspecting users, and while it currently evades detection by security tools, its infrastructure reveals clues about its origin and intent. This domain was flagged by PhishDestroy with 0 detections out of 95 VirusTotal scans as of the latest intelligence. It resolves to IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate, which may help it appear legitimate at first glance. The site is hosted on Wix’s platform, leveraging a subdomain structure to mimic official branding. Initial behavioral analysis indicates it captures entered wallet credentials or private keys, redirecting users’ funds to attacker-controlled wallets. Users should treat any login prompt from this domain as highly suspicious and avoid interaction entirely. If you have already visited official-suites-eng.wixstudio.com, disconnect from the internet immediately and scan your device for malware. Revoke any permissions granted to connected wallets or apps and transfer remaining funds to a secure, newly generated wallet. Use PhishDestroy’s real-time verification tool to confirm the safety of similar domains before entering sensitive information. Always verify URLs via official sources and enable multi-factor authentication where possible.