appsuites-trezro[.]wixstudio[.]com

PhishDestroy identifies appsuites-trezro.wixstudio.com as an active crypto drainer impersonating a popular wallet interface. The domain leverages a WixStudio hosting stack (34.144.206.118) to deploy a JavaScript drainer kit that silently siphons crypto assets from connected wallets upon authorization. The page mimics well-known wallet login flows, tricking users into granting malicious permissions that enable fund theft. No specific drainer kit signature was publicly disclosed, but behavioral analysis indicates it follows the ‘approval phishing’ pattern targeting ERC-20 and EVM-compatible tokens.

This domain was flagged under seed ee0bee with the following technical indicators: VirusTotal score 0/95 (no detections as of latest scan), resolving to IP 34.144.206.118 via a Let’s Encrypt SSL certificate. The domain is registered with Wix.com (Wix Inc., registrar ID: 1523), and the WixStudio subdomain indicates a recent deployment—creation date estimated within the past 90 days. Google Safe Browsing (GSB) has not yet listed this domain, and it remains absent from major threat intelligence blocklists such as PhishTank, OpenPhish, and URLVoid. WHOIS data is masked via Wix privacy protection, limiting historical insight into registrant intent.

As of today, the domain remains active and accessible, with the drainer kit still operational. PhishDestroy has flagged the domain under seed ee0bee and is coordinating with hosting provider Wix and domain registrar to initiate takedown via abuse channels. While the current risk is assessed as high due to active exploitation and lack of blocking, the absence of detections and blocklist inclusion suggests delayed threat intelligence propagation. Users are strongly advised to avoid interacting with this domain, verify any suspicious wallet link using PhishDestroy’s real-time scanner, and report transactions involving unauthorized transfers to relevant blockchain monitoring platforms. Remaining risk includes continued operation pending takedown and potential domain re-registration under new aliases.