suiteapp-trzosuite[.]wixstudio[.]com

PhishDestroy identifies suiteapp-trzosuite.wixstudio.com as an active crypto drainer phishing domain masquerading as a legitimate Suite app workspace. The domain leverages WixStudio hosting to deliver a malicious JavaScript drainer kit targeting cryptocurrency wallet credentials and transaction approvals. This is not a generic phishing attempt but a specialized crypto drainer designed to extract funds from compromised wallets through deceptive transaction prompts.

This domain was flagged with a VirusTotal detection score of 4 out of 95 antivirus engines as of the latest scan. It resolves to IP address 34.144.206.118, which is hosted on Google Cloud Platform infrastructure. The domain uses a valid Let’s Encrypt SSL certificate to appear legitimate. Registrar and creation date details are pending further forensic extraction. Google Safe Browsing (GSB) currently lists this domain as unblocked, and it has not yet been added to major threat intelligence blocklists despite active malicious activity.

As of this assessment, suiteapp-trzosuite.wixstudio.com remains active and continues to distribute the crypto drainer payload. Immediate response actions include domain takedown requests to Wix and Cloudflare, IP de-listing from threat feeds, and browser warning propagation. While antivirus coverage is currently low, the risk remains high due to active exploitation and the absence of widespread blocking. Users are advised to avoid accessing this domain and to scan their devices for wallet compromise if any interaction has occurred.