# suit-trizor.wixstudio.com — MALICIOUS

> Domain suit-trizor.wixstudio.com hosts an active crypto drainer phishing scam. VirusTotal flags 8/95 vendors. Block it immediately.

## Summary
PhishDestroy identifies suit-trizor.wixstudio.com as an elevated-risk domain hosting a live Crypto Drainer scam designed to trick victims into approving malicious wallet transactions. This threat masquerades as a support portal and is engineered to siphon cryptocurrency directly from connected wallets without requiring additional malware. The domain exhibits multiple red flags and is currently active, with evidence of ongoing abuse and user compromise reported in open-source intelligence feeds. Users who interact with this site risk irreversible financial loss.

Technical indicators confirm this domain is a high-confidence threat. VirusTotal analysis shows 8 out of 95 security vendors have flagged the domain as malicious. The infrastructure resolves to IP address 34.144.206.118 and uses a Let's Encrypt SSL certificate to appear legitimate. This domain is currently listed on two major blocklists, including PhishingArmy and OISD. The use of a WixStudio subdomain (wixstudio.com) as a host platform is a common tactic among threat actors to rapidly deploy fraudulent sites while leveraging the reputation of a legitimate hosting provider. While creation date and registrar information are not publicly disclosed due to Wix’s privacy protections, the combination of detection rates, blocklist presence, and active abuse reports strongly indicate a recently activated campaign.

To mitigate exposure to this Crypto Drainer threat, users must avoid clicking links or visiting suit-trizor.wixstudio.com entirely. If you or your organization have visited this site, disconnect all cryptocurrency wallets immediately and revoke any unnecessary permissions via your wallet’s “Connected Apps” or “DApp Browser” settings. Organizations should deploy DNS filtering to block access to known malicious domains like this one and monitor internal DNS logs for queries to suit-trizor.wixstudio.com. Always verify URLs before interacting, especially those claiming to offer support or claiming affiliation with trusted brands. Report instances of this scam to your wallet provider and relevant cybersecurity platforms to help stem its propagation.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 34.144.206.118

## Detection Status
- VirusTotal: 8 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishingArmy", "OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/18b27bfa-7f66-4ac8-bbda-6db4bdd9055d
- PhishDestroy: https://phishdestroy.io/domain/suit-trizor.wixstudio.com/
- LLM endpoint: https://phishdestroy.io/domain/suit-trizor.wixstudio.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/suit-trizor.wixstudio.com/
Last updated: 2026-04-12